ondra-novak commented on issue #1891: Per document read-access security
URL: https://github.com/apache/couchdb/issues/1891#issuecomment-459431431
 
 
   Hi, so I read the janl's proposal complete and ... let's say, it is not 
exactly duplicated. And I can also see the reason, why I couldn't find it, 
because it is trying to solve a different issue - but looks similar.
   
   Before I started to write to anything to the issue tracker, I tried to find 
the simplest proposal to implement, because I already know, that time of 
developers is very expensive. The janl's proposal seems much much difficult to 
implement (from my point of view, it introduces a new indices, need to rewrite 
a large part of view generation etc) and I am also worrying about final 
performance. 
   
   Question is whether it is need to **hide the document** or to **hide the 
content of the document**. My proposal just require to hide the content of the 
document, while the document still can be found and check its existence. The 
janl's proposal is following a way to a "virtual db". Isn't this a little 
overkill?
   
   _access keyword is seems similar to my _security keyword (just a name). The 
original _access doesn't seem to distinguish between user name and role, but 
this is only difference. I dont see a problem to addapt this form. However I 
can see much easier to use this keyword or "a rule" to control just output 
without need to affect many core features of the couchdb.
   
   Just my opinion.
   
   Have nice day
   
   
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to