[ 
https://issues.apache.org/jira/browse/COUCHDB-1894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13778376#comment-13778376
 ] 

Jason Smith commented on COUCHDB-1894:
--------------------------------------

[~chewbranca], can you add some specific details to your objections? I am not 
sure how to respond to "the security concerns me." What specific security 
threat do you see? Surely we can agree on an objective definition for 
evaluating the merit of this branch. I will start that conversation by noting 
two things: That the existing "sandbox" has no clear definition; and that using 
a view server requires administrator privileges.

[~wohali] regarding "wildly violations the assumed constraints of the 
viewserver model and provides strictly a view server, not a 'query server'" I 
am afraid I do not understand at all what that means. "View server" and "query 
server" are synonyms. I am not aware of any ability to abuse the 
protocol/provision, or of any coprocessing ability. Is it possible this ticket 
is confusingly similar to another more ambitious one?
                
> Add experimental NodeJS query server
> ------------------------------------
>
>                 Key: COUCHDB-1894
>                 URL: https://issues.apache.org/jira/browse/COUCHDB-1894
>             Project: CouchDB
>          Issue Type: New Feature
>          Components: JavaScript View Server
>            Reporter: Jan Lehnardt
>
> Let’s clean up and merge Jason Smith’s Node.js query server into ASF land and 
> ship it as opt-in and experimental.
> I’ve prepared a branch that does the following:
>  - remove fancy extra features like app server handlers and the visual 
> debugger support for now
>  - make it a drop-in replacement for couchjs
>  - bundle the code in src/couchjs-node
>  - add a new query server language “nodejs” that people can use
>  - include sandbox.js from https://github.com/KlausTrainer/sandbox.js (not 
> hooked up yet)
> The query server is not installed by default and users can install them in 
> two ways:
> 1. from source:
>     $ cd src/couchjs-node
>     $ npm link
> 2. from NPM:
>     $ npm install couchjs # add @1.x.x for once the module mirrors CouchDB 
> version numbers for forward compat)
> And then they can uncomment and update the [query_server] line in local.ini.
> * * *
> Open work items on the view server:
>  - make it work with CLI tests
>  - fix remaining test cases in web test runner
>  - hook up sandbox.js from https://github.com/KlausTrainer/sandbox.js

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to