Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (nike.apache.org: domain of conceptual.inertia@gmail.com
 designates 209.85.214.180 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type;
        b=fuyikQjKc6VVtYgE9sByKHrRgCCZNIAV9iasAFkPw9VER98egNr3wSvYC5TeztRjdi
         1YNgwAbT49prge0Pnd2oOLzqvi+Ru+QKEX1oOVKL24r5GfsVL0nC2iISXtEin1/J3n1m
         7UKIIeU+M2Q62l0VvrFzdm0Z4j2eZbKQS30ow=
MIME-Version: 1.0
Date: Fri, 11 Feb 2011 15:20:42 -0800
Message-ID: <AANLkTi=HjdidOY3LAJL4Br_FdXf6ULghPaus4p-g+XXc@mail.gmail.com>
Subject: Couch + desktop game?
From: ash oakenfold <conceptual.inertia@gmail.com>
To: user@couchdb.apache.org
Content-Type: multipart/alternative; boundary=20cf30334939672245049c09f2ba

--20cf30334939672245049c09f2ba
Content-Type: text/plain; charset=ISO-8859-1

Hi,

Learning CouchDB and very excited about it. Finally, a DB that makes sense!

As a 1st project, I thought I would try making a game (desktop only app). If
the player has a bunch of properties (cash, health, energy, etc) in a
document, and the server is running locally, what's to stop a player from
changing their player stats directly? I don't need super air-tight security
(if you're determined to cheat, go ahead) but it would be nice if only the
application (game logic) could update the user stats.

In my early tests, my app fires up curl in the background to create/update
documents. At this point, I'm not worried about end users having curl, or an
instance of CouchDB. I also know preventing users from editing documents
goes against the grain of Couch, but for a game it would be necessary to
restrict access only to the application as a "user". How would I do that?
Even if I create an admin account, how would I pass credentials along in
curl without it being plainly readable? It's all fuzzy to me right now.

Cheers,
Ash

--20cf30334939672245049c09f2ba--