Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (nike.apache.org: domain of zachary.zolton@gmail.com
 designates 209.85.219.213 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :content-type:content-transfer-encoding;
        b=M3X4S6tQaLKQt9cWV/xCsL/sDVfRpb6wg0D8xZ3O2df6RBXu9GLJImM6iAHhk5Coam
         e3G0HZtvarOH7IMjG1c4wrB4eAu9ay/HmNF5q4wIk8Q2qS6FonGY8w05WXR9FyO7jBMw
         WRtBHgEvF/HOQZXJa1PW4rtfpu4w3NiGU9OvM=
MIME-Version: 1.0
In-Reply-To: <4B680F11.1080904@may.be>
References: <4B680F11.1080904@may.be>
From: Zachary Zolton <zachary.zolton@gmail.com>
Date: Tue, 2 Feb 2010 09:23:24 -0600
Message-ID: <f728979f1002020723p18f3bd3cv6291a531505f86df@mail.gmail.com>
Subject: Re: validate_doc_update result format
To: user@couchdb.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Cliff,

Perhaps the wiki is out of date? The follow seemed to work for me:

  throw({unauthorized : message});  // for invalid data

OR

  throw({forbidden : message});  // for unauthorized updates

Whereas adding any other attribute to the throw object resulted in a 500 er=
ror.

The CouchDB book looks up-to-date on the matter:
http://books.couchdb.org/relax/design-documents/validation-functions


Cheers,

Zach

On Tue, Feb 2, 2010 at 5:40 AM, Cliff Stanford <cliff@may.be> wrote:
> According to http://wiki.apache.org/couchdb/Security_Features_Overview th=
e
> the following validation function:
>
> validate_doc_update: "function(newDoc, oldDoc, userCtx) {
> =A0 =A0throw {missing_field: 'Document must have an address.'};
> }"
>
> should give the result:
>
> HTTP/1.1 401 Unauthorized
> ...
> {"error":"missing_field","reason":"Document must have an address."}
>
> Using the released CouchDB 0.10.0 I get the following result:
>
> HTTP/1.1 500 Internal Server Error
> ...
> {"error":"try_clause","reason":"{[{<<\"missing_field\">>,<<\"Document mus=
t
> have an address.\">>}]}"}
>
> This looks like a bug to me. =A0Is there a better place to post this kind=
 of
> report?
>
> Regards,
> Cliff.
>
> --
> Cliff Stanford
> Might Limited =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 +44 845=
 0045 666 (Office)
> Suite 67, Dorset House =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0+44 7973 616 66=
6 (Mobile)
> Duke Street, Chelmsford, CM1 1TB
>
>