Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: local policy)
Date: Thu, 7 Mar 2013 17:57:39 +0200
From: svilen <az@svilendobrev.com>
To: user@couchdb.apache.org
Subject: Re: Curiosity how you use CouchDB in your web env.
Message-ID: <20130307175739.6ef25c40@svilendobrev.com>
In-Reply-To: <BAY158-W843C9ACC8302CA70D5243EA5E50@phx.gbl>
References: <BAY002-W22254A2D930478393314CB2A5E40@phx.gbl>
	<CACrj35FAbVXPbiNY0nWXDhmoY5gH-Br+9oYrwoFEhx-v=HXs6w@mail.gmail.com>
	<FB4ABA34-6B47-4033-804E-6025E3BE14C9@me.com>
	<CABvT1DHxApXndvU8gEGnZ_y=bOjg1+5X_4g7=JrrNHN9OXQz6A@mail.gmail.com>
	<CACrj35GDeBOoT-758XMF5_fx1cYVXd=oi--V7AYPCqqSV0FUrg@mail.gmail.com>
	<BA097FD0-82D0-4A96-BE65-D78750A858AB@utt.fr>
	<CABvT1DEFdDcPEx8y214gWwKKUQb=s4mruepDueCs3_nmNAR8ZA@mail.gmail.com>
	<CACrj35FTrcggUN_auAqT0yoRa77hnYMtK-DcKjP23KRCJ041hA@mail.gmail.com>
	<CABvT1DHRF1=OuRnrCiSxJuNS08UPWD9mVAqW0PGCh1wYMNa44g@mail.gmail.com>
	<CAAOi-OErBScFdzCOrspNStiAKNAHpC+ANaqrhfvZPMt4Xgh-7A@mail.gmail.com>
	<BAY158-W843C9ACC8302CA70D5243EA5E50@phx.gbl>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

probably, for going this way, one might use non-blocking
long_poll webframework like python/Tornado to wrap couchdb
replication/changes feed too. Thus something like
http:(someuserauth)//appserver/mychannel can route to couchdb's
changes for that database - or even aggregation - for that user even
if notion of user is not at all couchdb's one.
haven't tried it though.

On Fri, 8 Mar 2013 00:47:38 +0900
TAE JIN KIM <snowebang@hotmail.com> wrote:

> Daniel,
>=20
> So basically, what you r saying is that you put application layer in
> front of couch, so user no direct access to the couch.. Right?..I
> think you did pretty much similar thing #2 in my original post...
> BTW, just out of curiosity,  by doing this, any performance
> degradation / or any trouble stuff you may have to face with
> something you might had not expected at all ?...
>=20
> Thanks,
>=20
> > From: gonvaled@gonvaled.com
> > Date: Thu, 7 Mar 2013 16:37:36 +0100
> > Subject: Re: Curiosity how you use CouchDB in your web env.
> > To: user@couchdb.apache.org
> >=20
> > Well, if things were always so easy!
> >=20
> > We have this scenario: our webapp has to server data to different
> > organizations (hopefully thousands, if our product sells well).
> > That means we can not partition data in different databases: it
> > would be a maintenance nightmare. can somebody tell me how to:
> >=20
> >    - upgrade the design docs in 1000 databases without going crazy?
> >    - How to backup them?
> >    - ...
> >=20
> > I mean, the more databases you have, the more complicated
> > maintenance becomes. Maybe that can be automated, but it is not
> > easy out of the box.
> >=20
> > Besides, I do not want to implement the following:
> >=20
> >    - new organization signs-up
> >    - we create a new database for it
> >    - we upload the design documens
> >    - we trigger those documents
> >=20
> > I mean, it is probably doable, but I am not walking that path right
> > now. So, the only way that I know of in which we can partition the
> > data is by having an application server in front of couch: a single
> > database for all customers, with access control implemented via
> > view filtering with the org_id as key. The user has no direct
> > access to couch.
> >=20
> > On Wed, Mar 6, 2013 at 7:42 PM, Robert Newson <rnewson@apache.org>
> > wrote:
> >=20
> > > Don't grant users access to databases you don't want them to
> > > read. :)
> > >
> > > http://wiki.apache.org/couchdb/Security_Features_Overview#Authorizati=
on
> > >
> > > B.
> > >
> > > On 6 March 2013 12:33, Mark Hahn <mark@hahnca.com> wrote:
> > > > Anyone logged in can read any document in the DB.  I have to
> > > > check each user and what they are trying to do to block illegal
> > > > actions.
> > > >
> > > >
> > > > On Wed, Mar 6, 2013 at 9:51 AM, Robert Newson
> > > > <rnewson@apache.org>
> > > wrote:
> > > >
> > > >> "How does everyone solve the security issue?"
> > > >>
> > > >> What security problem? Only administrators can modify design
> > > >> documents.
> > > >>
> > > >> B.
> > > >>
> > > >> On 6 March 2013 11:38, Aur=C3=A9lien B=C3=A9nel <aurelien.benel@ut=
t.fr>
> > > >> wrote:
> > > >> > Hi,
> > > >> >
> > > >> >> just out of curiosity, would like to hear how CouchDB is
> > > >> >> being used
> > > in
> > > >> your web environment....
> > > >> >
> > > >> > We have two main setups:
> > > >> > - CouchApps,
> > > >> > - REST APIs used by heavy clients (Java or Firefox
> > > >> > extensions) and
> > > >> attached Web applications.
> > > >> >
> > > >> >> How does everyone solve the security issue?
> > > >> >
> > > >> > We always use CouchDB behind a reverse proxy to add LDAP
> > > authentication
> > > >> and authorization when needed.
> > > >> >
> > > >> >
> > > >> > Regards,
> > > >> >
> > > >> > Aur=C3=A9lien
> > > >>
> > >
>  		 	   		 =20