Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of samuelgoto@gmail.com
 designates 209.85.216.52 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type;
        b=PCiKfDdOS52o31iP4viBJHCyUmeR5evmwzgpbH1sZbVUaeazMQC5zCtVeNDNJtZIyk
         2HdxlFJMzewRx+bfyo1G2h2XO5N7Qw1UDgg8nBU2bNHi1zjCN5yxC0e/TUj2DX5wN1cO
         AeGI2hhOnVS2lI5MnEEKdaG8wdTwGIE5EuKW4=
MIME-Version: 1.0
Date: Tue, 3 Aug 2010 20:30:09 -0700
Message-ID: <AANLkTin1UWCX+-rW4pMT0ikDtwYcq+TmRfd40L967vxf@mail.gmail.com>
Subject: What are the contents of userCtx in validators ?
From: sgoto <samuelgoto@gmail.com>
To: user@couchdb.apache.org
Content-Type: multipart/alternative; boundary=0016364ed608f6cdd2048cf70ca0

--0016364ed608f6cdd2048cf70ca0
Content-Type: text/plain; charset=ISO-8859-1

Hey everyone,

   According to this page:

http://books.couchdb.org/relax/design-documents/validation-functions

   An administrator could write validation function to ensure the data that
gets written to couchdb is validated. I'm interested in adding some PGP-like
signing of documents for authentication. I'm also interested in md5ing the
contents of the message to ensure integrity, but i'll leave that for later.

  This leads me to the following question:

  What are the contents of userCtx in the validator's signature ?

function(newDoc, oldDoc, userCtx) {
  throw({forbidden : 'no way'});
}


would it be the contents of the authentication database ?

http://wiki.apache.org/couchdb/Security_Features_Overview
http://wiki.apache.org/couchdb/Authentication_and_Authorization

{
  "_id"          : "org.couchdb.user:joe",
  "type"         : "user",
  "name"         : "joe",
  "roles"        : ["erlanger"],
  "password_sha" : "fe95df1ca59a9b567bdca5cbaf8412abd6e06121",
  "salt"         : "4e170ffeb6f34daecfd814dfb4001a73"
}


any existing work/library/method (eg CA vs web of trust, storing encrypted
documents, signing, integrity, etc) that I should be aware of ?

-- 
f u cn rd ths u cn b a gd prgmr !

--0016364ed608f6cdd2048cf70ca0--