> On 28 Jul 2015, at 02:39, jumbo jim <jumboji...@gmail.com> wrote: > > Hi, > > It is possible to disable the "_all_docs" feature by editing the local.ini > and entering the following - > > [httpd_db_handlers] > _all_docs = > > However, I then realised that a user could basically get a full listing of > all documents by requesting _changes. So, I now use - > > [httpd_db_handlers] > _all_docs = > _changes = > > > Do I need to close anything else off if I want to prevent a particular user > from seeing a list of all documents?
This seems like a brittle approach, what are you trying to accomplish? > Also - is it possible to do disable _all_docs/ and _changes for only > specific databases? I would still like the admin to use _all_docs/ and > _changes That’s not possible. Best Jan -- > > Thanks -- Professional Support for Apache CouchDB: http://www.neighbourhood.ie/couchdb-support/
