couchdb-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ryan Ramage <ryan.ram...@gmail.com>
Subject Implications of adding readers to _users db for couch apps
Date Thu, 28 Apr 2011 16:24:42 GMT
I would relax a little more if the _users db was not so readable. I
would like to store email addresses in there, and I would not like
those to leak out. Therefore, I would like to add to the readers role
for security for the db.

So given a user who is not a reader in the _users db,
and a _users db with at least one entry
what javascript methods below will work?

login
logout
session
prepareUserDoc ( I can guess this wont, but to be complete)

And are there any other considerations by locking down the _users db?

Mime
View raw message