Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: pass (nike.apache.org: domain of kxepal@gmail.com designates
 74.125.82.41 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <F40131FF-0348-4C0D-9C27-4316FBA6C7B6@apache.org>
References: 
 <CA+bwPGkn=Q4daAzOXHVu4CzN4JtoQ=Z4CJSbeB0gdVysPkJEKw@mail.gmail.com>
	<3AD8B31E-1BED-41CC-AEF6-D3A873E4CC28@apache.org>
	<CAHdjip+27Cq7AuZGkaE3s-Vf87m_vBhv_PT304=CrncjtWa+NA@mail.gmail.com>
	<F40131FF-0348-4C0D-9C27-4316FBA6C7B6@apache.org>
Date: Wed, 19 Feb 2014 16:02:45 +0400
Message-ID: 
 <CAHdjipKRueX7NRXqAsA3AEaCqq4VfirdDtxKf-nB8YfKf7XX3g@mail.gmail.com>
Subject: Re: Capturing UserCtx automatically
From: Alexander Shorin <kxepal@gmail.com>
To: "dev@couchdb.apache.org" <dev@couchdb.apache.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Wed, Feb 19, 2014 at 3:59 PM, Jan Lehnardt <jan@apache.org> wrote:
> On 19 Feb 2014, at 11:42 , Alexander Shorin <kxepal@gmail.com> wrote:
>
>> On Wed, Feb 19, 2014 at 2:24 PM, Robert Samuel Newson
>> <rnewson@apache.org> wrote:
>>> validate_doc_update(oldDoc, newDoc, userCtx) {
>>>
>>>  if (newDoc.audit_trail[0].user !=3D userCtx.name) {
>>>    throw({forbidden: "You didn=E2=80=99t add your name to the audit tra=
il!"});
>>>  }
>>>  =E2=80=A6
>>> }
>>
>> There is one issue with such approach: replications. You will not be
>> able to replicate documents which has different username in
>> audit_trail from those one who runs the replication. Or, to be more
>> detailed, you'll replicate fine all documents till the design document
>> which brings this validation function to your database and after that
>> you'll only able to store documents which matches replication's user.
>
> You could add the replication user to the validation function and keep
> the original author.

Sure, I could. But this would be tricky and unclear for other users
that just wanted to grab the data from CouchDB.

--
,,,^..^,,,