Hi,

It is possible to disable the "_all_docs" feature by editing the local.ini
and entering the following -

[httpd_db_handlers]
_all_docs =

However, I then realised that a user could basically get a full listing of
all documents by requesting _changes. So, I now use -

[httpd_db_handlers]
_all_docs =
_changes =


Do I need to close anything else off if I want to prevent a particular user
from seeing a list of all documents?



Also - is it possible to do disable _all_docs/ and _changes for only
specific databases? I would still like the admin to use _all_docs/ and
_changes

Thanks

Reply via email to