From dev-return-22601-apmail-couchdb-dev-archive=couchdb.apache.org@couchdb.apache.org Sat Jun 23 12:16:45 2012 Return-Path: X-Original-To: apmail-couchdb-dev-archive@www.apache.org Delivered-To: apmail-couchdb-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id CC3F19FD3 for ; Sat, 23 Jun 2012 12:16:44 +0000 (UTC) Received: (qmail 23067 invoked by uid 500); 23 Jun 2012 12:16:44 -0000 Delivered-To: apmail-couchdb-dev-archive@couchdb.apache.org Received: (qmail 22918 invoked by uid 500); 23 Jun 2012 12:16:43 -0000 Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@couchdb.apache.org Delivered-To: mailing list dev@couchdb.apache.org Received: (qmail 22882 invoked by uid 99); 23 Jun 2012 12:16:43 -0000 Received: from issues-vm.apache.org (HELO issues-vm) (140.211.11.160) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 23 Jun 2012 12:16:43 +0000 Received: from isssues-vm.apache.org (localhost [127.0.0.1]) by issues-vm (Postfix) with ESMTP id DF07214167A for ; Sat, 23 Jun 2012 12:16:42 +0000 (UTC) Date: Sat, 23 Jun 2012 12:16:42 +0000 (UTC) From: "Robert Newson (JIRA)" To: dev@couchdb.apache.org Message-ID: <2049419417.47540.1340453802915.JavaMail.jiratomcat@issues-vm> In-Reply-To: <2089130976.47478.1340449722689.JavaMail.jiratomcat@issues-vm> Subject: [jira] [Resolved] (COUCHDB-1502) Users unable to delete own _users doc MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/COUCHDB-1502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Newson resolved COUCHDB-1502. ------------------------------------ Resolution: Fixed > Users unable to delete own _users doc > ------------------------------------- > > Key: COUCHDB-1502 > URL: https://issues.apache.org/jira/browse/COUCHDB-1502 > Project: CouchDB > Issue Type: Bug > Affects Versions: 1.2 > Reporter: Robert Newson > Assignee: Robert Newson > Fix For: 1.2.1 > > > Since the introduction of system db security a user cannot delete their own _users doc. This is because we test that the "name" field of the updated document matches the userCtx. It doesn't in the case of a DELETE because the body only contains _id, _rev and _deleted. > Changing the code to compare the username embedded in the doc _id instead is a fix. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira