I have this patch waiting like an idiot. Will review and pull request this weekend.
J On 20 Feb 2015 05:51, "Alexander Shorin (JIRA)" <[email protected]> wrote: > > [ > https://issues.apache.org/jira/browse/COUCHDB-2390?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel > ] > > Alexander Shorin updated COUCHDB-2390: > -------------------------------------- > Fix Version/s: 2.0.0 > > > Fauxton config, admin sections considered dangerous in 2.0 > > ---------------------------------------------------------- > > > > Key: COUCHDB-2390 > > URL: https://issues.apache.org/jira/browse/COUCHDB-2390 > > Project: CouchDB > > Issue Type: Bug > > Security Level: public(Regular issues) > > Components: BigCouch, Fauxton > > Reporter: Joan Touzet > > Assignee: Ben Keen > > Priority: Blocker > > Fix For: 2.0.0 > > > > > > In Fauxton today, there is are 2 sections to edit config-file settings > and to create new admins. Neither of these sections will work as intended > in a clustered setup. > > Any Fauxton session will necessarily be speaking to a single machine. > The config APIs and admin user info as exposed will only add that > information to a single node's .ini file. > > We should hide these features in Fauxton for now (short-term fix) and > correct the config /admin creation APIs to work correctly in a clustered > setup (medium-term fix). > > > > -- > This message was sent by Atlassian JIRA > (v6.3.4#6332) >
