[
https://issues.apache.org/jira/browse/COUCHDB-3232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15658511#comment-15658511
]
ASF subversion and git services commented on COUCHDB-3232:
----------------------------------------------------------
Commit 1ee7c63ebd0daaf0430460adda23560d03a1ba16 in couchdb-fabric's branch
refs/heads/master from [~rnewson]
[ https://git-wip-us.apache.org/repos/asf?p=couchdb-fabric.git;h=1ee7c63 ]
Pass user_ctx down to fabric_rpc
The Options array in fabric_view_all_docs contains the {user_ctx, _}
tuple but we omitted to pass it down to the open_doc command. This
caused several incorrect behaviours for the _users database which has
some special properties for privacy reasons.
COUCHDB-3232
> user context not passed down in fabric_view_all_docs
> ----------------------------------------------------
>
> Key: COUCHDB-3232
> URL: https://issues.apache.org/jira/browse/COUCHDB-3232
> Project: CouchDB
> Issue Type: Bug
> Affects Versions: 2.0.0
> Reporter: Robert Newson
>
> We omitted to pass user_ctx down in fabric_view_all_docs. Since auth has
> happened beforehand this hasn't been an obvious issue, but it matters for the
> _users db as that reacts differently based on the user. couchdb intentionally
> hides design documents in that database from non-admins and intentionally
> hides the user docs of other users.
> passing the user ctx down fixes both issues.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
