> Block requests to the all docs query, and you have the beginnings of a
> capability system.

Yes, preventing users from retrieving all docs ids would be critical.

Reply via email to