couchdb-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Benoit Chesneau <bchesn...@gmail.com>
Subject Re: [jira] [Resolved] (COUCHDB-1502) Users unable to delete own _users doc
Date Sat, 23 Jun 2012 12:44:00 GMT
I don't understand that ticket. Why do you want to delete a deleted user ?

On Sat, Jun 23, 2012 at 2:16 PM, Robert Newson (JIRA) <jira@apache.org> wrote:
>
>     [ https://issues.apache.org/jira/browse/COUCHDB-1502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
>
> Robert Newson resolved COUCHDB-1502.
> ------------------------------------
>
>    Resolution: Fixed
>
>> Users unable to delete own _users doc
>> -------------------------------------
>>
>>                 Key: COUCHDB-1502
>>                 URL: https://issues.apache.org/jira/browse/COUCHDB-1502
>>             Project: CouchDB
>>          Issue Type: Bug
>>    Affects Versions: 1.2
>>            Reporter: Robert Newson
>>            Assignee: Robert Newson
>>             Fix For: 1.2.1
>>
>>
>> Since the introduction of system db security a user cannot delete their own _users
doc. This is because we test that the "name" field of the updated document matches the userCtx.
It doesn't in the case of a DELETE because the body only contains _id, _rev and _deleted.
>> Changing the code to compare the username embedded in the doc _id instead is a fix.
>
> --
> This message is automatically generated by JIRA.
> If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
> For more information on JIRA, see: http://www.atlassian.com/software/jira
>
>

Mime
View raw message