Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of kxepal@gmail.com designates
 209.85.215.180 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <4FC4B330.3000503@gmail.com>
References: <4FC4B330.3000503@gmail.com>
Date: Tue, 29 May 2012 15:42:33 +0400
Message-ID: 
 <CAHdjip+A7VwDJUS7jSxk8iqOe4ZiBcR7dmPQ_aH1x129aqofyQ@mail.gmail.com>
Subject: Re: security: disable GET to some user
From: Alexander Shorin <kxepal@gmail.com>
To: user@couchdb.apache.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,

While you'd like to disable GET for some users for some doc with _id:
"foo" he could alternatively get it via:

curl -X POST http://localhost:5984/db/_all_docs?include_docs=3Dtrue -d
'{"keys":["foo"]}' -H "Content-Type: application/json"

Same works for other views. Probably, "per-user db" or "per-usergroup
db" design would be much more better solution.

--
,,,^..^,,,


On Tue, May 29, 2012 at 3:29 PM, Alessandro <dedalus2000@gmail.com> wrote:
> Hi all,
> =C2=A0 I'm "exploring" couchdb, and I'd like to know how can I use as fro=
nt-end
> also.
>
> So I think I need to disable the reading of some document to some
> users/roles/groups.
>
> Is this possible? Or have I to use a different front-end?
>
> Thanks
> Alessandro