From df264ad1fba5caa05d62165b6dc7b2fdb22c676d Mon Sep 17 00:00:00 2001 From: Jan Lehnardt Date: Mon, 16 May 2016 13:01:04 +0200 Subject: [PATCH] restore 1.x _users and _replicator behaviour --- src/chttpd_auth_request.erl | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/chttpd_auth_request.erl b/src/chttpd_auth_request.erl index b05c91f..90176c8 100644 --- a/src/chttpd_auth_request.erl +++ b/src/chttpd_auth_request.erl @@ -39,12 +39,20 @@ authorize_request_int(#httpd{path_parts=[<<"_replicator">>], method='PUT'}=Req) require_admin(Req); authorize_request_int(#httpd{path_parts=[<<"_replicator">>], method='DELETE'}=Req) -> require_admin(Req); +authorize_request_int(#httpd{path_parts=[<<"_replicator">>,<<"_all_docs">>|_]}=Req) -> + require_admin(Req); +authorize_request_int(#httpd{path_parts=[<<"_replicator">>,<<"_changes">>|_]}=Req) -> + require_admin(Req); authorize_request_int(#httpd{path_parts=[<<"_replicator">>|_]}=Req) -> db_authorization_check(Req); authorize_request_int(#httpd{path_parts=[<<"_users">>], method='PUT'}=Req) -> require_admin(Req); authorize_request_int(#httpd{path_parts=[<<"_users">>], method='DELETE'}=Req) -> require_admin(Req); +authorize_request_int(#httpd{path_parts=[<<"_users">>,<<"_all_docs">>|_]}=Req) -> + require_admin(Req); +authorize_request_int(#httpd{path_parts=[<<"_users">>,<<"_changes">>|_]}=Req) -> + require_admin(Req); authorize_request_int(#httpd{path_parts=[<<"_users">>|_]}=Req) -> db_authorization_check(Req); authorize_request_int(#httpd{path_parts=[<<"_", _/binary>>|_]}=Req) ->