[
https://issues.apache.org/jira/browse/COUCHDB-3367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16091849#comment-16091849
]
ASF subversion and git services commented on COUCHDB-3367:
----------------------------------------------------------
Commit 3523bab304cc031b9fcc150080ff539d9f76dabb in couchdb's branch
refs/heads/master from ILYA Khlopotov
[ https://gitbox.apache.org/repos/asf?p=couchdb.git;h=3523bab ]
Rename unused variables
COUCHDB-3367
> Require admin privileges for clustered _compact and _view_cleanup
> -----------------------------------------------------------------
>
> Key: COUCHDB-3367
> URL: https://issues.apache.org/jira/browse/COUCHDB-3367
> Project: CouchDB
> Issue Type: Bug
> Reporter: Frederick Kämpfer
>
> Contrary to what is stated in the security docs
> (http://docs.couchdb.org/en/2.0.0/intro/security.html) admin privileges are
> not enforced for the db/_compact and db/_view_cleanup clustered endpoints.
> Since normal users should not be able to trigger compaction, either system
> level or db level admin privileges should be enforced by couchdb.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
