You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by Apache Wiki <wi...@apache.org> on 2012/01/03 22:06:26 UTC

[Couchdb Wiki] Update of "Replication" by JanLehnardt

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Couchdb Wiki" for change notification.

The "Replication" page has been changed by JanLehnardt:
http://wiki.apache.org/couchdb/Replication?action=diff&rev1=38&rev2=39

Comment:
update for >= 1.2.0 system db security

  https://gist.github.com/832610  (from the author)
  
  http://docs.couchbase.org/couchdb-release-1.1/index.html#couchb-release-1.1-replicatordb  (verifed by the author)
+ 
+ Since CouchDB 1.2.0, special security restrictions are in place for the replicator database:
+ 
+  * Users can only update replication documents they created themselves.
+ 
+  * Users that read replication documents by other user will not get shown passwords and oath tokens used for authenticating replications.
+ 
+  * For all authenticated users, their username gets added to the `owner` field of the replication document.
+ 
+  * Only server and database admins can create design docs and access views.
+ 
+  * Server and database admins can update any replication document.
  
  
  == New features introduced in CouchDB 1.2.0 ==