CouchDB write-only database

Question

I'm trying to setup a CouchDB database that could be publicly writable and only readable by the "admin" role. How can I do this. Is there a similar validate_doc_update function for accessing a document ?

I'd like to store logging/analytics data in the DB that shouldn't be shared with anyone else... too bad this capability is not available without an app server to handle the security element. — Dobes Vandermeer, Sep 09 '11 at 11:44

score 1 · Answer 1 · edited Sep 02 '11 at 02:48

1

Check out this page on the wiki, it provides an introduction to setting up read/write-level security on a database level.

As of CouchDB 1.1.0, it is not possible to have write access but not also read access to a database. What you can do is write to database A and then replicate that into database B, and only the admin can read database B.

edited Sep 02 '11 at 02:48

JasonSmith

72,674
22
123
149

answered May 02 '11 at 23:59

Dominic Barnes

28,083
8
65
90

I didn't find any way to do what I want in this document. The fact is when you affect a Reader user or Reader role to a database, the database becomes private (you need to be authenticated to write). – Maxime May 04 '11 at 13:28
Despite that this answer comes from my arch nemesis, I edited to recommend the most common workaround and +1 :) – JasonSmith Sep 02 '11 at 02:49

score 0 · Accepted Answer · answered Sep 02 '11 at 03:05

One possible workaround would be to "abuse" Apache for this (though not 100% secure):

You can use Apache to disallow GET from everyone except specific hosts which are the ones the admin uses... this way the users can write but can't read and the admin can read...

You could even have different URLs for admin (read+write) and users (write only) if you config Apache as reverse proxy...

CouchDB write-only database

2 Answers2

Linked