Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-5610

view access must enforce bucket level authentication/authorization

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Duplicate
    • Affects Version/s: 2.0-developer-preview-3, 2.0-developer-preview-4, 2.0-beta
    • Fix Version/s: 2.0-beta
    • Component/s: None
    • Security Level: Public
    • Labels:
      None

      Description

      Currently, all view requests go to the base URI specified in the cluster configuration. Client libraries will assert authentication headers, and the server should verify these authentication headers for all but the default bucket.

      Note: I could not find an issue for this, though I know it's been discussed.

      No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

        Hide
        alkondratenko Aleksey Kondratenko (Inactive) added a comment -

        I believe it's part of generic CAPI needs to be password protected.

        BTW AFAIK latest master already should work correctly w.r.t. Basic auth and views access.

        Show
        alkondratenko Aleksey Kondratenko (Inactive) added a comment - I believe it's part of generic CAPI needs to be password protected. BTW AFAIK latest master already should work correctly w.r.t. Basic auth and views access.
        Hide
        dipti Dipti Borkar added a comment -

        this is not a bug. It has not yet been implemented and is in the works being tracked by engineering.

        Show
        dipti Dipti Borkar added a comment - this is not a bug. It has not yet been implemented and is in the works being tracked by engineering.
        Hide
        dipti Dipti Borkar added a comment -

        tracked via development tasks. we are not feature complete yet. functionality is currently in the works.

        Peter, FYI.

        Show
        dipti Dipti Borkar added a comment - tracked via development tasks. we are not feature complete yet. functionality is currently in the works. Peter, FYI.

          People

          • Assignee:
            peter peter
            Reporter:
            ingenthr Matt Ingenthron
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Gerrit Reviews

              There are no open Gerrit changes