Alexander Shorin created COUCHDB-2309:
-----------------------------------------
Summary: Only admins can browse _all_dbs
Key: COUCHDB-2309
URL: https://issues.apache.org/jira/browse/COUCHDB-2309
Project: CouchDB
Issue Type: Bug
Security Level: public (Regular issues)
Components: BigCouch
Reporter: Alexander Shorin
1. Run CouchDB 2.0 @ dd10292
2. Fix Admin Party
3. Logout
4. GET http://localhost:15984/_all_dbs
{code}
* Hostname was NOT found in DNS cache
* Trying 127.0.0.1...
* Connected to localhost (127.0.0.1) port 15984 (#0)
> GET /_all_dbs HTTP/1.1
> User-Agent: curl/7.36.0
> Host: localhost:15984
> Accept: */*
>
< HTTP/1.1 401 Unauthorized
< X-CouchDB-Body-Time: 0
< X-Couch-Request-ID: d86ea480
* Server CouchDB/e696e43 (Erlang OTP/17) is not blacklisted
< Server: CouchDB/e696e43 (Erlang OTP/17)
< Date: Wed, 27 Aug 2014 12:31:22 GMT
< Content-Type: text/plain; charset=utf-8
< Content-Length: 64
< Cache-Control: must-revalidate
<
{"error":"unauthorized","reason":"You are not a server admin."}
* Connection #0 to host localhost left intact
{code}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
