Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (nike.apache.org: domain of tjgillies@gmail.com designates
 74.125.83.52 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:sender:in-reply-to:references:date
         :x-google-sender-auth:message-id:subject:from:to:content-type;
        b=fVP1Spb8VpIDa5VxOee4vEwTMzaaK5L9YqZwpp6tDz7eKgfM4acCPufRXkPBQLQuW0
         XEAkzoEo1hnS1lwNXuUdzEpsP+uamQTZWc1G1IUaBCFWt+uS68cSLnZTSJLEXhzIWwV9
         1ZHhEnceorwkiK41rVS2yI/4c2OF/r5080Rmo=
MIME-Version: 1.0
Sender: tjgillies@gmail.com
In-Reply-To: <AANLkTins1vy8uR1qkBJ12cZofVCUcXwOJtOO_dAuFwh0@mail.gmail.com>
References: <AANLkTinRp6AGjngNvEQLinQPKFJrfb4EMsCeKYeumb8d@mail.gmail.com>
	<AANLkTins1vy8uR1qkBJ12cZofVCUcXwOJtOO_dAuFwh0@mail.gmail.com>
Date: Thu, 16 Sep 2010 18:33:56 -0700
Message-ID: <AANLkTimse61K_e8pto--6LO=NML35QZ6Q9SVH4ao0s0K@mail.gmail.com>
Subject: Re: Read Only Permissions for a database
From: Tyler Gillies <tyler@pdxbrain.com>
To: user@couchdb.apache.org
Content-Type: multipart/alternative; boundary=0016361e88cc6ac50604906a8e30

--0016361e88cc6ac50604906a8e30
Content-Type: text/plain; charset=UTF-8

also cloudant has some user-friendly db access control

On Thu, Sep 16, 2010 at 4:09 PM, Zachary Zolton <zachary.zolton@gmail.com>wrote:

> The easiest way I know to do this is by putting up a design doc, with
> a validate_doc_update function like the following:
>
> function(newDoc, oldDoc, userCtx) {
>  if (userCtx.roles.length == 0 || userCtx.roles.indexOf('_admin') == -1) {
>    throw({ forbidden: 'You must be an admin in to save data' });
>  }
> }
>
>
> Cheers,
>
> Zach
>
> On Thu, Sep 16, 2010 at 6:05 PM, Michael <newmaniese@gmail.com> wrote:
> > I think this is a really stupid question, but I really can't figure it
> out.
> >
> > I have a database, which I want to be readable by everyone,
> > but changeable by only admin. I look at the security of the database in
> > futon and see admins and readers. Now I put someone into the readers or
> > leave it blank and that person can still update and create documents.
> >
> > How do I create a database and make it read-only for the public? Ideally
> I
> > would like what is the currently behavior for 'readers' for my
> applications
> > and then only I have admin rights. Is this possible?
> >
> > Thanks in advance,
> >
> > Michael
> >
>


-- 
http://www.readwriteweb.com/about#tyler

Ask me anything <http://tumble.pdxbrain.com/ask>!

--0016361e88cc6ac50604906a8e30--