Return-Path: X-Original-To: apmail-couchdb-user-archive@www.apache.org Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id B551C10BF7 for ; Thu, 2 Jan 2014 00:41:09 +0000 (UTC) Received: (qmail 63105 invoked by uid 500); 2 Jan 2014 00:41:08 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 63068 invoked by uid 500); 2 Jan 2014 00:41:08 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 63060 invoked by uid 99); 2 Jan 2014 00:41:08 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jan 2014 00:41:08 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=RCVD_IN_DNSWL_NONE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of jens@couchbase.com designates 206.225.164.30 as permitted sender) Received: from [206.225.164.30] (HELO EXHUB020-3.exch020.serverdata.net) (206.225.164.30) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jan 2014 00:41:02 +0000 Received: from EXVMBX020-1.exch020.serverdata.net ([169.254.4.179]) by EXHUB020-3.exch020.serverdata.net ([206.225.164.30]) with mapi; Wed, 1 Jan 2014 16:40:40 -0800 From: Jens Alfke To: "user@couchdb.apache.org" Date: Wed, 1 Jan 2014 16:40:39 -0800 Subject: Re: Disabling doc include Thread-Topic: Disabling doc include Thread-Index: Ac8HU0MfYNBPYNOgQ9KrOinDrWOtYQ== Message-ID: <62B10A41-4192-4BD5-8DB7-156CDEB62B37@couchbase.com> References: <52C28C30.7010809@meredrica.org> <52C291F9.80708@meredrica.org> <0C582CB4-CAA4-4BB4-A4EB-9529E177F0C9@apache.org> In-Reply-To: <0C582CB4-CAA4-4BB4-A4EB-9529E177F0C9@apache.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org On Jan 1, 2014, at 3:27 PM, Robert Newson wrote: > There=92s no document level read protection, but you can certainly grant = or deny read access to users on a per database basis. Yes, but that isn=92t relevant to what the OP is trying to do, i.e. give us= ers access to some data but not all of it. > The restrictive proxy approach is brittle, it requires that you know all = the URL patterns to block and keep them up to date when you upgrade CouchDB= . It can work, it=92s just not awesome. Yes. I only brought it up because it=92s the only way I know of to enable s= ome form of per-document read protection using Apache CouchDB (as opposed t= o something similar-but-not-the-same, like Couchbase Sync Gateway.) =97Jens