couchdb-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hans J Schroeder (JIRA)" <j...@apache.org>
Subject [jira] [Created] (COUCHDB-2014) Fauxton requires full admin rights to access secondary indexes
Date Sat, 04 Jan 2014 11:09:51 GMT
Hans J Schroeder created COUCHDB-2014:
-----------------------------------------

             Summary: Fauxton requires full admin rights to access secondary indexes
                 Key: COUCHDB-2014
                 URL: https://issues.apache.org/jira/browse/COUCHDB-2014
             Project: CouchDB
          Issue Type: Bug
          Components: Fauxton
            Reporter: Hans J Schroeder


Fauxton requires full admin rights to access secondary indexes where db admin right should
be enough.

Step to reproduce:

In futon everything works as expected:

1. As admin create a database "aaa"
2. Set security to admin: ["usera"] and member: ["usera"]
3. Create a view "all/by_id"
4. Log in as "usera" and open the view "all/by_id"

In fauxton:

1. Login as "usera"
2. Open the database "aaa"
3. Click on the secondary index "all/by_id" -> This leads to no access and opens the login
page.

I guess it has something to do with routeroles being to strict. The "no access" is generated
client-side.
 



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Mime
View raw message