Question

Je suis en train d'installer une base de données CouchDB qui pourrait être publiquement inscriptible et lisible que par le rôle « admin ». Comment puis-je faire ceci. Y at-il une fonction de validate_doc_update similaire pour accéder à un document?

Était-ce utile?

La solution

One possible workaround would be to "abuse" Apache for this (though not 100% secure):

You can use Apache to disallow GET from everyone except specific hosts which are the ones the admin uses... this way the users can write but can't read and the admin can read...

You could even have different URLs for admin (read+write) and users (write only) if you config Apache as reverse proxy...

Autres conseils

Check out this page on the wiki, it provides an introduction to setting up read/write-level security on a database level.

As of CouchDB 1.1.0, it is not possible to have write access but not also read access to a database. What you can do is write to database A and then replicate that into database B, and only the admin can read database B.

Licencié sous: CC-BY-SA avec attribution
Non affilié à StackOverflow
scroll top