Return-Path: Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: (qmail 53439 invoked from network); 27 Aug 2009 14:19:46 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 27 Aug 2009 14:19:46 -0000 Received: (qmail 95169 invoked by uid 500); 27 Aug 2009 14:19:45 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 95081 invoked by uid 500); 27 Aug 2009 14:19:45 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 95071 invoked by uid 99); 27 Aug 2009 14:19:45 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 27 Aug 2009 14:19:45 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of federicot@gmail.com designates 74.125.92.24 as permitted sender) Received: from [74.125.92.24] (HELO qw-out-2122.google.com) (74.125.92.24) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 27 Aug 2009 14:19:37 +0000 Received: by qw-out-2122.google.com with SMTP id 3so233496qwe.29 for ; Thu, 27 Aug 2009 07:19:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=4HMnUQKPQKnJmckH/7vUj7kaxLoMWDZaU/Vb4JjmuTo=; b=k3pQeUMLSCMPDW9b9LH0fGd4DSJfiZ0Pc/rJ52rVbkjiynoPKcYJ2BXqDPKZ8SausB ekcUnqJuvpSIkbHhfQjjd2ROeLEjIj4gOhenTRgFiQAsLTWN8Kj2mJIiHVddOSO/Kx3g VSs6Yb77aKMoZtvaYz7qQSOdVpz9ci/Ad0Sas= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=NPuudFae8m2IOFCZljYEID5cp2yQOGwub3GjGF4nf5rATdhR1gT3iRQgyOTe9uAKxW PKkrgFq4nIoWSkyFMe5VWG0yq+Muc+W8iWYk94soqYGHw5UIbo3kZqACNwDHnKEQdpbL IFE2WAJ74LpdtP9yQ3wRG1nWgCTblG8U9yW5I= MIME-Version: 1.0 Received: by 10.224.110.212 with SMTP id o20mr6266877qap.151.1251382754822; Thu, 27 Aug 2009 07:19:14 -0700 (PDT) In-Reply-To: References: <1e8afe70908262031m3e83d679yca00c548d705f6ab@mail.gmail.com> Date: Thu, 27 Aug 2009 11:19:14 -0300 Message-ID: <6b8f53220908270719x14a35a11xcd9e3f6f5c8ce15@mail.gmail.com> Subject: Re: Standalone App vs Server Side From: Federico To: user@couchdb.apache.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org I think its called: Security through obscurity. On Thu, Aug 27, 2009 at 5:04 AM, Benoit Chesneau wrote: > On Thu, Aug 27, 2009 at 5:31 AM, Elton Okada wrote: >> developing a standalone couchdb application, without a server side like >> python or ruby can be insecure ? I mean, a user can see the design document >> code with all my aplication logic, can i restrict access to a design >> document, and still get it working ? >> > > why would you want to restrict access to design doc ? >