Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of fairwinds.dp@gmail.com
 designates 209.85.216.180 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=W1DSM91NUQekoOSn6CHooogkKOJQCBMLkXmF+vpwdWaEdN3ITx0gkcqh4TAccTTmGb
         4fJUk57aPbSQp4KPdHj5uSrbgXzmOp/+IBO3who5HK2Ucry/sWYlTTb5RnFTjC867UMo
         +77QifT+XEXK6pJkVmZGvSUA6Nmd2xGLoc7ic=
MIME-Version: 1.0
In-Reply-To: <AANLkTi=2YosdagtwzBTmWKDykhJJ=HJo6CyDPMYGxgvt@mail.gmail.com>
References: <AANLkTikcY8tXO_-UnP0cm8beNG7O3yJAj7kk2xmNeWi3@mail.gmail.com>
	<AANLkTi=ygHtHC75r9jOvmbodmaNqoLKL4px288e8OkTG@mail.gmail.com>
	<AANLkTinH0kuYKG5LQof3F2Y-Mxpv_1urCcFFMLnqi1iP@mail.gmail.com>
	<AANLkTik=iEenF126fDALCM87z3n6g=FWoQEktPt2N64x@mail.gmail.com>
	<AANLkTimU0BJ8wC-WRR-cgr4HK=rTnyjWsn7S3W6XTB59@mail.gmail.com>
	<AANLkTi=6mB=HaUit9s-Lgfsj-YYs4jj587MR3c0DqQDv@mail.gmail.com>
	<AANLkTi=+TXBu3-YewHPxJBocyrx9tGxQfuuJbK6fU1FJ@mail.gmail.com>
	<AANLkTinTXp_k-MXd9tvE=SXy6fGTVpg4h_AWk45cbAuk@mail.gmail.com>
	<AANLkTinYuU8F-u=sLXz1kxLGRQ=WSuviqd7iEP+SDyTO@mail.gmail.com>
	<AANLkTi=2YosdagtwzBTmWKDykhJJ=HJo6CyDPMYGxgvt@mail.gmail.com>
Date: Thu, 2 Dec 2010 13:14:15 -0400
Message-ID: <AANLkTinX31XX=FABzrVVxL0Lb_MyLs_6nTATg0Y+jxiR@mail.gmail.com>
Subject: Re: Per Document Filtering/Authorization
From: David Pratt <fairwinds.dp@gmail.com>
To: dev@couchdb.apache.org
Content-Type: text/plain; charset=ISO-8859-1

> which is already something most folks do for filtering views etc. If
> there is no entry in _authorization database, the data accessible to
> the extent that we have any Readers for database as it is now.

sorry typo - last bit should have read ..

the data would be accessible to the extent that we have any Readers
for database as it is now.

To add to above, it might be good for the system to have a special
entity named "ALL" where access to everyone is not implied by the
absence of record in _authorization for the _type but could be made
explicitly if desired.