[jira] [Commented] (COUCHDB-1631) Require admin privileges to read _all_dbs

["Benoit Chesneau (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/COUCHDB-1631?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13534911#comment-13534911 ] 

Benoit Chesneau commented on COUCHDB-1631:
------------------------------------------

What issue it is solving? 

Also already commented on your gist, but it should be made switchable for the following reason:

- This patch has a severe impact on couchapps too since it's restrain the ability to browse multiple dbs and such.
- What about readers? Those who can read different dbs, they won't be able to read them.

 Also since it makes futon completely unsuable, I think the patch shouldn't stop it and should also patch /_utils. 

I'm -0 about it. I would prefere a lot to have a way to filter the db list according the user which can be on the long term more useful.
                
> Require admin privileges to read _all_dbs
> -----------------------------------------
>
>                 Key: COUCHDB-1631
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-1631
>             Project: CouchDB
>          Issue Type: New Feature
>          Components: HTTP Interface
>            Reporter: Dave Cottlehuber
>         Attachments: force_admins_only_for_all_dbs.diff
>
>
> The patch for this is straightforwards, & I think that this should actually be the default behaviour in future. Comments?
> Note to self, docs, tests required once discussion is settled.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira