Return-Path: X-Original-To: apmail-couchdb-user-archive@www.apache.org Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id EF4E9F312 for ; Tue, 2 Apr 2013 17:03:04 +0000 (UTC) Received: (qmail 6388 invoked by uid 500); 2 Apr 2013 17:03:03 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 6285 invoked by uid 500); 2 Apr 2013 17:03:03 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 6260 invoked by uid 99); 2 Apr 2013 17:03:02 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Apr 2013 17:03:02 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=RCVD_IN_DNSWL_NONE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of jens@couchbase.com designates 206.225.164.32 as permitted sender) Received: from [206.225.164.32] (HELO EXHUB020-5.exch020.serverdata.net) (206.225.164.32) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Apr 2013 17:02:57 +0000 Received: from EXVMBX020-1.exch020.serverdata.net ([169.254.4.77]) by EXHUB020-5.exch020.serverdata.net ([206.225.164.32]) with mapi; Tue, 2 Apr 2013 10:02:35 -0700 From: Jens Alfke To: "user@couchdb.apache.org" Date: Tue, 2 Apr 2013 10:02:36 -0700 Subject: Re: Allow anonymous users to write but not to read from database Thread-Topic: Allow anonymous users to write but not to read from database Thread-Index: Ac4vw98i/Hu8TuN+REeN+oHlNCRJxg== Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org On Apr 2, 2013, at 8:35 AM, Benedikt Rudolph wrote: > I would like to know if it is possible to set up a CouchDB database such > that: > - Anonymous users can write to the database AND > - Anonymous users can NOT read from the database I would implement this with a simple server-side handler (node.js or servle= t or CGI or whatever) that accepts anonymous JSON documents and posts them = to the database. The database itself wouldn=92t be exposed to anonymous acc= ess at all =97 either its port isn=92t publicly reachable, or it=92s locked= down and the CGI sends a valid credential to do its posts. =97Jens=