Hans J Schroeder created COUCHDB-2014:
-----------------------------------------

             Summary: Fauxton requires full admin rights to access secondary 
indexes
                 Key: COUCHDB-2014
                 URL: https://issues.apache.org/jira/browse/COUCHDB-2014
             Project: CouchDB
          Issue Type: Bug
          Components: Fauxton
            Reporter: Hans J Schroeder


Fauxton requires full admin rights to access secondary indexes where db admin 
right should be enough.

Step to reproduce:

In futon everything works as expected:

1. As admin create a database "aaa"
2. Set security to admin: ["usera"] and member: ["usera"]
3. Create a view "all/by_id"
4. Log in as "usera" and open the view "all/by_id"

In fauxton:

1. Login as "usera"
2. Open the database "aaa"
3. Click on the secondary index "all/by_id" -> This leads to no access and 
opens the login page.

I guess it has something to do with routeroles being to strict. The "no access" 
is generated client-side.
 



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to