> The aim is to implement a least privilege model To achieve that with _rewrite you very likely still need at least a simple proxy, which will redirect most or all inbound requests to a particular _rewrite endpoint. This case R.Newson’s argument doesn’t stand, rewrite becomes mandatory.
As for creating DBs – that’s right, user can’t create DBs without being an _admin. As for deprecation – about 80% of QS methods are deprecated, anyway they are useful and there’s no reason not to use them. Porting _rewrite to node.js is pretty straightforward if needed. Hope it helps. ermouth
