Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of randall.leeds@gmail.com
 designates 209.85.161.52 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=XLGYGdsEMGj8+FUQEqbYm05G3VgwT1sZ1ORAT8o/MbH7dPGdwchYr/sP6MjU3eruc/
         kWW4iTgCQC/OqY+L/haJ5gP5Vrk9Kl93cVnJkFGZB1OO0Q4Zhv8N2PV1XPKqF1TKeDpk
         qFTpqmdqUcMNgRl+pv3oa1ZuuQg6DAfbEN7Is=
MIME-Version: 1.0
In-Reply-To: <AANLkTi=H35A3xUVAFkQ1ST=yUYMK4m7d_giRgxZ7xPsL@mail.gmail.com>
References: <AANLkTi=H35A3xUVAFkQ1ST=yUYMK4m7d_giRgxZ7xPsL@mail.gmail.com>
Date: Tue, 9 Nov 2010 14:09:35 -0800
Message-ID: <AANLkTimF3FmzLfOHTOgFTcM5r7hsqPRYxrcpVegUCnaP@mail.gmail.com>
Subject: Re: Can I prevent replication of design documents?
From: Randall Leeds <randall.leeds@gmail.com>
To: user@couchdb.apache.org
Content-Type: text/plain; charset=UTF-8

You can't restrict read access to the design document using
permissions because then I think your application would not be able to
access views, shows, lists, updates, etc.

However, you could perhaps restrict network access to these resources
explicitly. Put a reverse proxy in front of your couch that forbids
access to everything under /db/_design/app* except
/db/_design/app/_(show|list|view|update)*. This way, the user context
for CouchDB within which your visitors access the views and lists will
still have access to the design document (you have not changed the
document permissions), but external attempts to fetch the code itself
will be blocked. Just be careful that none of your other code (such as
a show function) can be used to format and display the design document
itself.

This might work, but I haven't thought about it longer than a minute.
Let me know what you find if you investigate.

On Tue, Nov 9, 2010 at 13:45, Hendrik Jan van Meerveld <haaiee@gmail.com> wrote:
> Hi All,
>
> I'm trying to move a website from Drupal to Couchdb.
> For this I am wondering whether there is a way to prevent
> website visitors from replicating the whole website to their
> home computers.
> Does anybody know of such an option? Does it work on the CouchOne
> shared hosting?
>
> Same goes for an application that the company where I work uses.
> It would be great if it could be rewritten from its current
> incarnation to a Couchdb application, but that's not an option
> if the whole world can replicate the application.
>
> Thanks for any help.
>