rnewson / couchdb-lucene

Enables full-text searching of CouchDB documents using Lucene
Apache License 2.0
768 stars 147 forks source link

only the admins should be allowed to do index maintenance #94

Open anandology opened 13 years ago

anandology commented 13 years ago

couchdb-lucene index maintanance operations like _optimize, _expunge and _cleanup should be accessible only with the admin credentials.

For exampe, my couchdb database doesn't allow me do _compact without admin credentials, but allowes me to _optmize couchdb-lucene index.

$ curl -X POST http://localhost:15984/editions/_compact
{"error":"unauthorized","reason":"You are not a db or server admin."}
$ curl -X POST http://localhost:15984/editions/_fti/_design/seeds/by_seed/_optimize
{"ok":true}
drlinux commented 8 years ago

It seems you have set the authentication credentials in the couchdb-lucene.ini file. I think there is no way to manage that...