Details
-
Bug
-
Resolution: Fixed
-
Major
-
None
-
Untriaged
-
1
-
Unknown
Description
POST view query is supported for multi collection. https://github.com/couchbase/couchdb/commit/cf69d22a07e9c8687dda93c830f5ff01f99be829
view-engine incorrectly requires write permission for view query for all POST "_design/[ddoc]/_view/" rest api.
view reader permission is sufficient to execute view queries.
Attachments
For Gerrit Dashboard: MB-52201 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
176108,4 | MB-52201 : POST type view query should require only views.reader permission | neo | ns_server | Status: MERGED | +2 | +1 |
176658,1 | Merge remote-tracking branch 'couchbase/neo' | master | ns_server | Status: MERGED | +2 | +1 |