Fwd: [couchdb] Fix for COUCHDB-1449 stopped status returned before couchdb process exits. (15c1a97)

2013-09-27 Thread Jan Lehnardt


Begin forwarded message:

 From: agilethomas notificati...@github.com
 Subject: Re: [couchdb] Fix for COUCHDB-1449 stopped status returned before 
 couchdb process exits. (15c1a97)
 Date: September 27, 2013 04:35:16 GMT+02:00
 To: apache/couchdb couc...@noreply.github.com
 Cc: Jan Lehnardt j...@apache.org
 Reply-To: apache/couchdb 
 reply+c-4194248-dd31dab9609d66f2cc0f3d6e006b67ad133e3ae2-11...@reply.github.com
 
 I am running Ubuntu 12.04 64-bit and this change does not work for me. The 
 parent script is still running after a stop command is given, which starts 
 up CouchDB again. Adding back in lines 292-294 solves this problem.
 
 —
 Reply to this email directly or view it on GitHub.
 



signature.asc
Description: Message signed with OpenPGP using GPGMail


[jira] [Resolved] (COUCHDB-1871) Permissions Security section in fauxton

2013-09-27 Thread Garren Smith (JIRA)

 [ 
https://issues.apache.org/jira/browse/COUCHDB-1871?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Garren Smith resolved COUCHDB-1871.
---

Resolution: Fixed

 Permissions  Security section in fauxton
 -

 Key: COUCHDB-1871
 URL: https://issues.apache.org/jira/browse/COUCHDB-1871
 Project: CouchDB
  Issue Type: Task
  Components: Fauxton
Reporter: Sue Lockwood
Assignee: Garren Smith

 Need to create the DB permissions and security section.
 Put the link to get to it in the dropdown with Docs and Changes. 
 I have no comps for this atm.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Proposed couch hack in November or December

2013-09-27 Thread Dave Cottlehuber
Hi everybody,

Is there interest in having a hackathon again in late November or early 
December?

Ideally we'd focus this on something specific and big -- merging all the forks 
-- and make the weekend a 4 day one.

I can organise faciliities in Vienna -- which has the other advantage that I 
can attend around family commitments. I think I used up my travel budget for 
the year by now.

A+
Dave




Re: Proposed couch hack in November or December

2013-09-27 Thread Benoit Chesneau
both are ok for me.


On Fri, Sep 27, 2013 at 6:51 PM, Dave Cottlehuber d...@jsonified.com wrote:

 Hi everybody,

 Is there interest in having a hackathon again in late November or early
 December?

 Ideally we'd focus this on something specific and big -- merging all the
 forks -- and make the weekend a 4 day one.

 I can organise faciliities in Vienna -- which has the other advantage that
 I can attend around family commitments. I think I used up my travel budget
 for the year by now.

 A+
 Dave





Re: Proposed couch hack in November or December

2013-09-27 Thread Robert Newson
I'm interested too.
On 27 Sep 2013 17:54, Benoit Chesneau bchesn...@gmail.com wrote:

 both are ok for me.


 On Fri, Sep 27, 2013 at 6:51 PM, Dave Cottlehuber d...@jsonified.com
 wrote:

  Hi everybody,
 
  Is there interest in having a hackathon again in late November or early
  December?
 
  Ideally we'd focus this on something specific and big -- merging all the
  forks -- and make the weekend a 4 day one.
 
  I can organise faciliities in Vienna -- which has the other advantage
 that
  I can attend around family commitments. I think I used up my travel
 budget
  for the year by now.
 
  A+
  Dave
 
 
 



Re: Proposed couch hack in November or December

2013-09-27 Thread Simon Metson
Depending on dates I'm up for it.  


On Friday, 27 September 2013 at 18:04, Robert Newson wrote:

 I'm interested too.
 On 27 Sep 2013 17:54, Benoit Chesneau bchesn...@gmail.com wrote:
 
  both are ok for me.
  
  
  On Fri, Sep 27, 2013 at 6:51 PM, Dave Cottlehuber d...@jsonified.com
  wrote:
  
   Hi everybody,
   
   Is there interest in having a hackathon again in late November or early
   December?
   
   Ideally we'd focus this on something specific and big -- merging all the
   forks -- and make the weekend a 4 day one.
   
   I can organise faciliities in Vienna -- which has the other advantage
  that
   I can attend around family commitments. I think I used up my travel
  
  budget
   for the year by now.
   
   A+
   Dave
   
  
  
 
 
 




Re: Proposed couch hack in November or December

2013-09-27 Thread Dave Cottlehuber
Depending on dates I'm up for it.

Be more specific. Oh and bring some Olde Speckled Hen or similar while you're 
at it ;-).

Benoit, Bob: \o/ yay!

A+
Dave





Re: Proposed couch hack in November or December

2013-09-27 Thread st...@meredrica.org
Hello all!

If it's in December and in Vienna I could drop by too. But only if
somebody without Erlang skills is of any help as I don't want to slow
things down.

Cheers!
Florian

On 9/27/2013 7:56 PM, Dave Cottlehuber wrote:
 Depending on dates I'm up for it.
 
 Be more specific. Oh and bring some Olde Speckled Hen or similar while you're 
 at it ;-).
 
 Benoit, Bob: \o/ yay!
 
 A+
 Dave
 
 
 



Re: Proposed couch hack in November or December

2013-09-27 Thread Dave Cottlehuber
Hello all!

If it's in December and in Vienna I could drop by too. But only if
somebody without Erlang skills is of any help as I don't want to slow
things down.

Cheers!
Florian

Yay -- this would be a huge help Florian. I have done OK with very
little Erlang skill so don't feel your presence would be a hindrance.

What areas would you be interested in contributing to? JIRA is a
good place to see what's missing.

A+
Dave




Re: Proposed couch hack in November or December

2013-09-27 Thread Paul J Davis
November 28th is Thanksgiving which is big family thing. As long as it's not 
that weekend I'm in. 

 On Sep 27, 2013, at 11:51 AM, Dave Cottlehuber d...@jsonified.com wrote:
 
 Hi everybody,
 
 Is there interest in having a hackathon again in late November or early 
 December?
 
 Ideally we'd focus this on something specific and big -- merging all the 
 forks -- and make the weekend a 4 day one.
 
 I can organise faciliities in Vienna -- which has the other advantage that I 
 can attend around family commitments. I think I used up my travel budget for 
 the year by now.
 
 A+
 Dave
 
 


Re: Proposed couch hack in November or December

2013-09-27 Thread meredrica
I don't know really - whatever you think I could handle.
I'm developing my Master Thesis on CouchDB but I barely qualify as a user :)
I could do docs, tests, merges (i'm a++ with git), things that are easy
and boring for others... I just want to give back to the community really.

Regarding location: Metalab? Nice place to hack at stuff and the
infrastructure is great.

Florian
On 9/27/2013 8:16 PM, Dave Cottlehuber wrote:
 Hello all!

 If it's in December and in Vienna I could drop by too. But only if
 somebody without Erlang skills is of any help as I don't want to slow
 things down.

 Cheers!
 Florian
 
 Yay -- this would be a huge help Florian. I have done OK with very
 little Erlang skill so don't feel your presence would be a hindrance.
 
 What areas would you be interested in contributing to? JIRA is a
 good place to see what's missing.
 
 A+
 Dave
 
 



Re: Proposed couch hack in November or December

2013-09-27 Thread Adam Kocoloski
I'm interested.  My travel schedule in early December is pretty open at the 
moment.

Adam

On Sep 27, 2013, at 12:51 PM, Dave Cottlehuber d...@jsonified.com wrote:

 Hi everybody,
 
 Is there interest in having a hackathon again in late November or early 
 December?
 
 Ideally we'd focus this on something specific and big -- merging all the 
 forks -- and make the weekend a 4 day one.
 
 I can organise faciliities in Vienna -- which has the other advantage that I 
 can attend around family commitments. I think I used up my travel budget for 
 the year by now.
 
 A+
 Dave
 
 



Re: Proposed couch hack in November or December

2013-09-27 Thread Octavian Damiean
Oh that sounds great! I'd join you guys, if only to get to know you and
help test stuff. ;)


On Fri, Sep 27, 2013 at 6:51 PM, Dave Cottlehuber d...@jsonified.com wrote:

 Hi everybody,

 Is there interest in having a hackathon again in late November or early
 December?

 Ideally we'd focus this on something specific and big -- merging all the
 forks -- and make the weekend a 4 day one.

 I can organise faciliities in Vienna -- which has the other advantage that
 I can attend around family commitments. I think I used up my travel budget
 for the year by now.

 A+
 Dave





-- 
Octavian Damiean

GitHub: https://github.com/mainerror


[jira] [Commented] (COUCHDB-1894) Add experimental NodeJS query server

2013-09-27 Thread Jan Lehnardt (JIRA)

[ 
https://issues.apache.org/jira/browse/COUCHDB-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13780430#comment-13780430
 ] 

Jan Lehnardt commented on COUCHDB-1894:
---

Sorry for not addressing security concerns upfront, I knew they would be 
important and I rushed this ticket instead of taking the time to lay it all out.

But first, this is a ticket for a branch for an experiment. This is not a 
suggestion that we should stop and change everything we do now. If we can’t 
experiment, we can’t progress, so I’d ask to take this with an experimental 
state of mind.


This ticket is for review and iteration on an idea and some code.

This code is an addition to the existing ways of doing things. It is off by 
default and opt-in and comes 
with large disclaimers.

This view server runtime is not meant to replace couchjs today. It might never 
replace couchjs.

If this is to ever replace couchjs, we need to start somewhere and this is as 
good a start as any. If there are other starting points, we should capture them 
in JIRA  branches as well.

Getting this into more people’s hands via an experimental feature will allow us 
to make this good sooner.

Dave brought up CORS as a good example of getting something experimental out 
that we can improve with user feedback once it is out. I hope we can do the 
same here and I really hope we can use this model a lot more in the future. 
This project has long suffered from trying to ship perfection.

Finally, we already ship an off-by-default and totally dangerous view server 
that has access to all of CouchDB’s internals and we don’t sweat much about 
that. Let’s not start now.


couchjs works but it is in dire need of improving. Mikeal’s original proposal 
for make it pipelined is now three or four years old. The fact that one has to 
juggle slightly scary JavaScript in an unfamiliar environment (SpiderMonkey on 
the cli is no really common), some scary C and some Erlang to iterate on the 
query server implementation lead to de-facto zero iteration and improvement. 
Sure we tacked on a few things and refactored the Erlang side of things, but 
the fundamental operation of couchjs  main.js has not changed in half a decade.

I believe we can open this up to more experimenting and eventually to better 
software if we have a Node.js version of this.

I have outlined the reasons why we want the default query server to be 
JavaScript in a recent mailing list post[1] so I won’t reiterate this here.

What I would love to see here is the following:

 - definition of an acceptable secure code execution environment for view 
functions.
 - an improved communication method and protocol between the view server and 
CouchDB.
 - the ripping out of anything that isn’t necessary for views 
 - the moving of features like _show/_list/_update etc. to a separate execution 
environment that is better suited for these kinds of access models. (the way we 
run _show  _list is really not ideal).
 - and finally and most importantly: other language implementations of the 
improved protocol and better separated features that we can then promote more 
prominently.

This is a lot of work and we need to ship working software along the way. 
That’s why I propose to get this experiment going early and start from a point 
of minimal differences to the current model so we all have a chance of going on 
the journey of iterating and improving the view server and ultimately a core 
feature of CouchDB.

Now, as for the security scenario in some more detail. I agree with Jason that 
we need to be very clear about what we mean with various terms and what we 
compare couchjs-nodejs too, especially because wrecking havoc with couchjs is 
not too hard today.

That said, despite the state of the vm module in Node (and its ongoing rewrite 
which we should watch closely), it should give us exactly what we need: a pure 
execution environment that has whitelisted access to outside resources. There 
is some more legwork required today which is where sandbox.js comes in. We 
haven’t solved all the problems yet (e.g. sandbox isn’t even used today), but 
cursory trying to break out of the current implementation wasn’t trivial. I 
plan to get the node security project involved so we get a bit of a better 
understanding and maybe even a proper security review.

I hope this addresses all concerns for making this a priority in CouchDB land. 
I’m looking forward to hack with you.

[1]: 
http://mail-archives.apache.org/mod_mbox/couchdb-dev/201309.mbox/%3c222e40f7-99e5-4c2c-8ee1-756f05352...@apache.org%3e

 Add experimental NodeJS query server
 

 Key: COUCHDB-1894
 URL: https://issues.apache.org/jira/browse/COUCHDB-1894
 Project: CouchDB
  Issue Type: New Feature
  Components: JavaScript View Server
Reporter: Jan