Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: local policy includes SPF record at
 spf.trusted-forwarder.org)
From: Jan Lehnardt <jan@apache.org>
Content-Type: multipart/signed;
 boundary="Apple-Mail=_97F44746-B8BA-4D31-B167-9EC27F614B7B";
 protocol="application/pgp-signature"; micalg=pgp-sha512
Message-Id: <9FC45859-A700-429D-9DD6-BDB44582A4CD@apache.org>
Mime-Version: 1.0 (Mac OS X Mail 7.0 \(1812\))
Subject: Re: Disabling doc include
Date: Thu, 2 Jan 2014 19:06:32 +0100
References: <52C28C30.7010809@meredrica.org>
 <CAHdjipKDnJL=FMsB9LFzLR2oLTLV6n-+5rc_G06+XX_Y1J-m1w@mail.gmail.com>
 <52C291F9.80708@meredrica.org>
 <ACE57B78-1CE5-4D4F-AAB5-032415799F52@couchbase.com>
 <CAPNuaCgo=K2o=Ja_QCyv0dDWxxxzUOiXKCJM4a7+xBP-GufdEA@mail.gmail.com>
To: user@couchdb.apache.org
In-Reply-To: 
 <CAPNuaCgo=K2o=Ja_QCyv0dDWxxxzUOiXKCJM4a7+xBP-GufdEA@mail.gmail.com>

--Apple-Mail=_97F44746-B8BA-4D31-B167-9EC27F614B7B
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252


On 01 Jan 2014, at 23:32 , Stanley Iriele <siriele2x3@gmail.com> wrote:

> Can't you just use vhosts and rewrites to take care of that?... =
Also...you
> could use list functions to ad an extra step yo do anything you want =
with
> the results of a view before sending it to a client

vhosts are using the `Host` header in HTTP requests. While mandatory in
HTTP 1.1, CouchDB will happily answer to HTTP 1.0 requests without a =
`Host`
header and will serve the default `/` URL and any subsequent one.

Do not use CouchDB vhosts as a security mechanism.

Best
Jan
--=20


> On Jan 1, 2014 3:47 PM, "Jens Alfke" <jens@couchbase.com> wrote:
>=20
>>=20
>> On Dec 31, 2013, at 1:44 AM, meredrica <stuff@meredrica.org> wrote:
>>=20
>>> I expose CouchDB directly to mobile clients and wanted to hide some
>>> information from them.
>>=20
>> You can=92t really do that; there=92s no notion of read-protection in =
CouchDB.
>> As a workaround you can put CouchDB behind a proxy or gateway, and
>> restrict the URL patterns that clients are allowed to send.
>>=20
>> =97Jens
>>=20
>>=20


--Apple-Mail=_97F44746-B8BA-4D31-B167-9EC27F614B7B
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
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=I3S5
-----END PGP SIGNATURE-----

--Apple-Mail=_97F44746-B8BA-4D31-B167-9EC27F614B7B--