Robert Newson created COUCHDB-1502:
--------------------------------------
Summary: Users unable to delete own _users doc
Key: COUCHDB-1502
URL: https://issues.apache.org/jira/browse/COUCHDB-1502
Project: CouchDB
Issue Type: Bug
Affects Versions: 1.2
Reporter: Robert Newson
Assignee: Robert Newson
Fix For: 1.2.1
Since the introduction of system db security a user cannot delete their own
_users doc. This is because we test that the "name" field of the updated
document matches the userCtx. It doesn't in the case of a DELETE because the
body only contains _id, _rev and _deleted.
Changing the code to compare the username embedded in the doc _id instead is a
fix.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
