Basic user cannot acces _users view

[max <ma...@gmail.com>]

Hello,

As written in the documentation when a user without "Roles" tries to access
a view from a design document in _users db he gets:
"only admin  Only admins can access design document actions for system
databases"

I need every users to acces others user objects but without credentials
part. To do that I've written a view in _users/_design/app that return
every users without credentials.

When I set the security of _users to "manager" in admin Role and I access
to this view with such a user it works.

But when no security Roles is defined no one is able to access to my view.

My problem is that I have thousands of basic users (without Roles defined)
and would like to allow them to access this new view.

I am using couchdb 1.4.0.

Thanks.

MLM.

Re: Basic user cannot acces _users view

[max <ma...@gmail.com>]

Thank you for your answer.

This is a good idea but I still need to make basic user access _users
design document to call some view (my users have a 'group' property) and
only get users of their group.

Any other ideas ?

Thanks in advance

2015-07-27 17:53 GMT+02:00 Paul Okstad <po...@gmail.com>:

> User’s Public Information might be helpful for you:
>
>
> http://docs.couchdb.org/en/latest/intro/security.html#users-public-information
>
> --
> Paul Okstad
> http://pokstad.com <http://pokstad.com/>
>
>
>
> > On Jul 27, 2015, at 5:49 AM, max <ma...@gmail.com> wrote:
> >
> > Hello,
> >
> > As written in the documentation when a user without "Roles" tries to
> access
> > a view from a design document in _users db he gets:
> > "only admin  Only admins can access design document actions for system
> > databases"
> >
> > I need every users to acces others user objects but without credentials
> > part. To do that I've written a view in _users/_design/app that return
> > every users without credentials.
> >
> > When I set the security of _users to "manager" in admin Role and I access
> > to this view with such a user it works.
> >
> > But when no security Roles is defined no one is able to access to my
> view.
> >
> > My problem is that I have thousands of basic users (without Roles
> defined)
> > and would like to allow them to access this new view.
> >
> > I am using couchdb 1.4.0.
> >
> > Thanks.
> >
> > MLM.
>
>

Re: Basic user cannot acces _users view

[Paul Okstad <po...@gmail.com>]

User’s Public Information might be helpful for you:

http://docs.couchdb.org/en/latest/intro/security.html#users-public-information

-- 
Paul Okstad
http://pokstad.com <http://pokstad.com/>



> On Jul 27, 2015, at 5:49 AM, max <ma...@gmail.com> wrote:
> 
> Hello,
> 
> As written in the documentation when a user without "Roles" tries to access
> a view from a design document in _users db he gets:
> "only admin  Only admins can access design document actions for system
> databases"
> 
> I need every users to acces others user objects but without credentials
> part. To do that I've written a view in _users/_design/app that return
> every users without credentials.
> 
> When I set the security of _users to "manager" in admin Role and I access
> to this view with such a user it works.
> 
> But when no security Roles is defined no one is able to access to my view.
> 
> My problem is that I have thousands of basic users (without Roles defined)
> and would like to allow them to access this new view.
> 
> I am using couchdb 1.4.0.
> 
> Thanks.
> 
> MLM.