Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of truemped@googlemail.com
 designates 209.85.214.52 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=googlemail.com; s=gamma;
        h=content-type:mime-version:subject:from:in-reply-to:date
         :content-transfer-encoding:message-id:references:to:x-mailer;
        b=IMJ3BmhmICL7kNZqUAvPlKD/0qnu/aM5y2ma/VVbGxZ+EYSM2xN3c9h2Kf0ZHNh3kG
         tyB2hE3DvJrO87IlCXwmVebcFHgvywWrOo1SiTQOitBTECCcqKj8P4vewJZYbx2QbraK
         05/xmviR2OPsIIdO9VedFbY6Qt5qYvZ70lXaw=
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1081)
Subject: Re: hidden fields in a document
From: Daniel Truemper <truemped@googlemail.com>
In-Reply-To: <AANLkTim0oYmazrqwvVG5yLq6GglToUZN7GsY967Vqq3B@mail.gmail.com>
Date: Tue, 22 Jun 2010 15:21:38 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <6FE178C8-822E-4FAD-ABAA-F47E4248FEC7@googlemail.com>
References: <AANLkTim0oYmazrqwvVG5yLq6GglToUZN7GsY967Vqq3B@mail.gmail.com>
To: user@couchdb.apache.org

Hi,

>  I have a need where certain fields in a document shouldn't seen while
> responding for GET document API's. For e.g the document store's =
certain
> fields which are internal to the application not to be seen by end =
user.
Why do you store the data along the document the end-user will see? You =
could easily create another document with your app specific data and =
create a reference to the original document. With a view you could GET =
them both at the same time.

In order to "protect" specific documents from the outside world you =
should use a reverse proxy (something like nginx) and forbid access to =
certain URLs.

Best
Daniel=