[COUCHDB-1155] Etag send by list function does not depend on userCtx

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.0.2
• Fix Version/s: 1.3
• Component/s: HTTP Interface
• Assignee: Randall Leeds
• Reporter: Johannes J. Schmidt
• Created: 10/May/11 15:46
• Updated: 10/Oct/12 20:09
• Resolved: 10/Oct/12 20:09

Description

List functions should send a different Etag when requested by different users.
The following curl session shows identical Etags for different users. CouchDB must not be in admin party mode.

PROTOCOL=http
DOMAIN="127.0.0.1:5984"
DB=testdb

1. admin credentials for db creation
   ADMIN=admin:secure
2. this user must have an empty roles array
   USER=user:secure

curl -XDELETE $PROTOCOL://$ADMIN@$DOMAIN/$DB
curl -XPUT $PROTOCOL://$ADMIN@$DOMAIN/$DB
curl -XPUT $PROTOCOL://$ADMIN@$DOMAIN/$DB/foo -d '

{"count":1}

'
curl -XPUT $PROTOCOL://$ADMIN@$DOMAIN/$DB/_design/foo -d '{ "views": { "bar": { "map": "function(doc)

{ emit(doc._id, null); }

" } }, "lists": { "bar": "function(head, req)

{ return req.userCtx.name || \"anonymous\" }

" }}'

curl -s $PROTOCOL://$DOMAIN/$DB/_design/foo/_list/bar/bar --head | grep Etag
curl -s $PROTOCOL://$USER@$DOMAIN/$DB/_design/foo/_list/bar/bar --head | grep Etag

#=> Etag: "A1NKHA0935KMCSHFSK94EHZNL"
#=> Etag: "A1NKHA0935KMCSHFSK94EHZNL"

This issue is important for standalone CouchDB applications which use list functions depending on the user context, eg. showing a login button or username.

regards
Johannes

PS: I tried to write a javascript test case but this issue can only be reproduced if the server is not in admin party mode, which the test suite requires. I am not so familar with those tests to temporarily change the admin party.