Return-Path: X-Original-To: apmail-couchdb-user-archive@www.apache.org Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id DCA821081C for ; Wed, 1 Jan 2014 20:47:39 +0000 (UTC) Received: (qmail 37021 invoked by uid 500); 1 Jan 2014 20:47:38 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 36952 invoked by uid 500); 1 Jan 2014 20:47:38 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 36944 invoked by uid 99); 1 Jan 2014 20:47:38 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jan 2014 20:47:38 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=RCVD_IN_DNSWL_NONE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of jens@couchbase.com designates 206.225.164.31 as permitted sender) Received: from [206.225.164.31] (HELO EXHUB020-4.exch020.serverdata.net) (206.225.164.31) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 01 Jan 2014 20:47:32 +0000 Received: from EXVMBX020-1.exch020.serverdata.net ([169.254.4.179]) by EXHUB020-4.exch020.serverdata.net ([206.225.164.31]) with mapi; Wed, 1 Jan 2014 12:47:10 -0800 From: Jens Alfke To: "user@couchdb.apache.org" Date: Wed, 1 Jan 2014 12:47:10 -0800 Subject: Re: Disabling doc include Thread-Topic: Disabling doc include Thread-Index: Ac8HMqQzTdsxTRPoS+C/l8BTlXbpQg== Message-ID: References: <52C28C30.7010809@meredrica.org> <52C291F9.80708@meredrica.org> In-Reply-To: <52C291F9.80708@meredrica.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org On Dec 31, 2013, at 1:44 AM, meredrica wrote: > I expose CouchDB directly to mobile clients and wanted to hide some=20 > information from them. You can=92t really do that; there=92s no notion of read-protection in Couch= DB. As a workaround you can put CouchDB behind a proxy or gateway, and restrict= the URL patterns that clients are allowed to send. =97Jens