Mailing-List: contact couchdb-user-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: couchdb-user@incubator.apache.org
Received-SPF: pass (athena.apache.org: domain of automatthew@gmail.com
 designates 209.85.128.191 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=BLXQVZyGFXnilkbSgQ4tVVxNTCXDKcyYBR1LsZH9JjvIgn7kiYqU4X+EMgClQWaI20
         imYwKFz9VPbPK3w78vJKIQfZbMnS2KIBDjaPpo636yyZjv9NOPz2fat4a6jYCLaOguq/
         uAYicmscGJa2yjlVV1SaRBwRYwlVvNrMtazqM=
Message-ID: <cdbc18280810071654r19cf2f04id0a5464d767df6df@mail.gmail.com>
Date: Tue, 7 Oct 2008 18:54:44 -0500
From: "Matthew King" <automatthew@gmail.com>
To: couchdb-user@incubator.apache.org
Subject: Re: Security via probability
In-Reply-To: <7c40ded80810071642v6b4a601cxecb74630b7e6d59f@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <13ae4dd50810071635s5f655d45ofb084e3e74fd6be6@mail.gmail.com>
	 <7c40ded80810071642v6b4a601cxecb74630b7e6d59f@mail.gmail.com>

Block requests to the all docs query, and you have the beginnings of a
capability system.

On Tue, Oct 7, 2008 at 6:42 PM, Jeremy Wall <jwall@google.com> wrote:
> This assumes that the user has to guess. If the user gets the docif
> via some other means, say by the all docs query built in to couchdb
> then h doesn't have to guess.
>
>
>
> On 10/7/08, Paul Carey <paul.p.carey@gmail.com> wrote:
>> My webapp PUTs data to a url like /controller/couchdb_db_doc_id. The
>> associated action currently performs no security checks. Specifically,
>> it doesn't ensure that the user making the PUT request and modifying
>> the data actually owns the associated document.
>>
>> Given a uuid as a doc id, the chances of guessing a doc id are very
>> low indeed; successfully guessing a typical user's password would be
>> much easier. In order for an attack to be successful the attacker
>> would have to first guess a document id - extremely unlikely. This
>> leads me to believe that I don't *need* to perform any security checks
>> when modifying a document as described above. Any thoughts to the
>> contrary?
>>
>> Cheers
>>
>> Paul
>>
>
> --
> Sent from my mobile device
>