From user-return-3643-apmail-couchdb-user-archive=couchdb.apache.org@couchdb.apache.org Sat Feb 21 11:40:07 2009 Return-Path: Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: (qmail 62015 invoked from network); 21 Feb 2009 11:40:06 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 21 Feb 2009 11:40:06 -0000 Received: (qmail 45442 invoked by uid 500); 21 Feb 2009 11:40:04 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 45138 invoked by uid 500); 21 Feb 2009 11:40:02 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 45127 invoked by uid 99); 21 Feb 2009 11:40:02 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 21 Feb 2009 03:40:02 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of jason@jasondavies.com designates 89.145.97.179 as permitted sender) Received: from [89.145.97.179] (HELO www1.netspade.com) (89.145.97.179) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 21 Feb 2009 11:39:52 +0000 Received: from jddavies.gotadsl.co.uk ([82.133.112.184] helo=[10.0.0.14]) by www1.netspade.com with esmtpa (Exim 4.69) (envelope-from ) id 1LaqH5-0003rO-8Q for user@couchdb.apache.org; Sat, 21 Feb 2009 11:44:04 +0000 Message-Id: From: Jason Davies To: user@couchdb.apache.org In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v930.3) Date: Sat, 21 Feb 2009 11:39:30 +0000 References: X-Mailer: Apple Mail (2.930.3) X-SA-Exim-Connect-IP: 82.133.112.184 X-SA-Exim-Mail-From: jason@jasondavies.com X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on www1.netspade.com X-Spam-Level: Subject: Re: Managing access X-SA-Exim-Version: 4.2.1 (built Wed, 25 Jun 2008 17:14:11 +0000) X-SA-Exim-Scanned: Yes (on www1.netspade.com) X-Virus-Checked: Checked by ClamAV on apache.org X-Old-Spam-Status: No, score=-4.4 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 autolearn=ham version=3.2.5 Hi Jyrki, On 21 Feb 2009, at 11:28, Jyrki Pulliainen wrote: > CouchDB site talks about managing user access on database (Admin, > read, update), but I can't find any documentation about this feature. > Can someone pinpoint a page describing the built-in access management? We're currently discussing the exact implementation details of authentication and authorization on the developer mailing list. The best place to read about the current state of security and validation features is probably this blog post: http://jchris.mfdz.com/posts/132 The "Reader Access" functionality described on the site is still under development as far as I know, and isn't available in the current source code for testing just yet. Administrator access and update validation is available though, to the extent described in the blog post above. -- Jason Davies www.jasondavies.com