Skip to content
This repository has been archived by the owner on Oct 17, 2022. It is now read-only.

rfc(per-doc-access): first draft #424

Closed
wants to merge 9 commits into from
Closed

rfc(per-doc-access): first draft #424

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
e5a54a2
rfc(per-doc-access): first draft
janl Jul 7, 2019
0e12884
fix: typos
janl Jul 7, 2019
1077dbc
feat: add extra notes about security issues
janl Jul 8, 2019
a08438f
fix: typo h/t @jaydoane
janl Jul 15, 2019
b1d6a59
fix typo
janl Jul 19, 2019
2b8f941
clarify
janl Jul 19, 2019
748828d
fix format
janl Jul 19, 2019
e52b3da
fix format
janl Jul 21, 2019
a0cfaea
allow distribution of design docs
janl Jul 21, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix typo
  • Loading branch information
@janl
janl committed Jul 19, 2019
commit b1d6a598740ced9c9ab851aeac07a5bee49b2be9
2 changes: 1 addition & 1 deletion rfcs/010-per-document-access-control.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -141,7 +141,7 @@ An access-enabled database behaves like this:
work around this and potentially prefix docs with the username before
writing/replicating them in.
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This feels like a more complex security issue - the suggestion that applications work around this feels a little weak given that the user themselves are able to pollute the global document space via direct API access?

I guess here our suggestion is either "use a separate database for system docs" or "use a VDU to prevent system docs with _access set"?


* _security members are allowed to write design docs, but the have to
* _security members are allowed to write design docs, but they have to
have an `_access` field and those design docs with an `_access` field
are ignored on the server side. Db-admin ddocs get indexes built as
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it might be clearer if you write this as:
design doc's with an _access field will be ignored in an access database

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yeah I must have missed this one, I have it that way further down

normal.
Expand Down