You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by Apache Wiki <wi...@apache.org> on 2012/01/03 22:06:26 UTC
[Couchdb Wiki] Update of "Replication" by JanLehnardt
Dear Wiki user,
You have subscribed to a wiki page or wiki category on "Couchdb Wiki" for change notification.
The "Replication" page has been changed by JanLehnardt:
http://wiki.apache.org/couchdb/Replication?action=diff&rev1=38&rev2=39
Comment:
update for >= 1.2.0 system db security
https://gist.github.com/832610 (from the author)
http://docs.couchbase.org/couchdb-release-1.1/index.html#couchb-release-1.1-replicatordb (verifed by the author)
+
+ Since CouchDB 1.2.0, special security restrictions are in place for the replicator database:
+
+ * Users can only update replication documents they created themselves.
+
+ * Users that read replication documents by other user will not get shown passwords and oath tokens used for authenticating replications.
+
+ * For all authenticated users, their username gets added to the `owner` field of the replication document.
+
+ * Only server and database admins can create design docs and access views.
+
+ * Server and database admins can update any replication document.
== New features introduced in CouchDB 1.2.0 ==