Couchbase Server

view access must enforce bucket level authentication/authorization

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Blocker Blocker
  • Resolution: Duplicate
  • Affects Version/s: 2.0-developer-preview-3, 2.0-developer-preview-4, 2.0-beta
  • Fix Version/s: 2.0-beta
  • Component/s: None
  • Security Level: Public
  • Labels:
    None

Description

Currently, all view requests go to the base URI specified in the cluster configuration. Client libraries will assert authentication headers, and the server should verify these authentication headers for all but the default bucket.

Note: I could not find an issue for this, though I know it's been discussed.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Aleksey Kondratenko added a comment -
I believe it's part of generic CAPI needs to be password protected.

BTW AFAIK latest master already should work correctly w.r.t. Basic auth and views access.
Show
Aleksey Kondratenko added a comment - I believe it's part of generic CAPI needs to be password protected. BTW AFAIK latest master already should work correctly w.r.t. Basic auth and views access.
Hide
Permalink
Dipti Borkar added a comment -
this is not a bug. It has not yet been implemented and is in the works being tracked by engineering.
Show
Dipti Borkar added a comment - this is not a bug. It has not yet been implemented and is in the works being tracked by engineering.
Hide
Permalink
Dipti Borkar added a comment -
tracked via development tasks. we are not feature complete yet. functionality is currently in the works.

Peter, FYI.
Show
Dipti Borkar added a comment - tracked via development tasks. we are not feature complete yet. functionality is currently in the works. Peter, FYI.

People

  • Assignee:
    Peter Wansch
    Reporter:
    Matt Ingenthron
Vote (0)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved: