couchdb-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jan Lehnardt <...@apache.org>
Subject Re: Capturing UserCtx automatically
Date Wed, 19 Feb 2014 12:17:16 GMT

On 19 Feb 2014, at 13:02 , Alexander Shorin <kxepal@gmail.com> wrote:

> On Wed, Feb 19, 2014 at 3:59 PM, Jan Lehnardt <jan@apache.org> wrote:
>> On 19 Feb 2014, at 11:42 , Alexander Shorin <kxepal@gmail.com> wrote:
>> 
>>> On Wed, Feb 19, 2014 at 2:24 PM, Robert Samuel Newson
>>> <rnewson@apache.org> wrote:
>>>> validate_doc_update(oldDoc, newDoc, userCtx) {
>>>> 
>>>> if (newDoc.audit_trail[0].user != userCtx.name) {
>>>>  throw({forbidden: "You didn’t add your name to the audit trail!"});
>>>> }
>>>> …
>>>> }
>>> 
>>> There is one issue with such approach: replications. You will not be
>>> able to replicate documents which has different username in
>>> audit_trail from those one who runs the replication. Or, to be more
>>> detailed, you'll replicate fine all documents till the design document
>>> which brings this validation function to your database and after that
>>> you'll only able to store documents which matches replication's user.
>> 
>> You could add the replication user to the validation function and keep
>> the original author.
> 
> Sure, I could. But this would be tricky and unclear for other users
> that just wanted to grab the data from CouchDB.

how so?

Mime
View raw message