diff options
| author | Frederick Kaempfer <frederick.kaempfer@gmail.com> | 2017-07-04 22:21:00 +0200 |
|---|---|---|
| committer | Joan Touzet <wohali@users.noreply.github.com> | 2017-07-12 11:12:37 -0400 |
| commit | 3b509ce382f7d9c7dfb62493dfceb91ea86adc09 (patch) | |
| tree | 827a88f3c4f6d0690eb6f8e3bf06ad2bbfcf82b7 | |
| parent | 45c573b0ae351d5c39850491badf32a8a453339e (diff) | |
| download | couchdb-3b509ce382f7d9c7dfb62493dfceb91ea86adc09.tar.gz | |
make sure to also run security check for design doc compaction
| -rw-r--r-- | src/chttpd/src/chttpd_auth_request.erl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/chttpd/src/chttpd_auth_request.erl b/src/chttpd/src/chttpd_auth_request.erl index ab160ee79..9d9a4ca85 100644 --- a/src/chttpd/src/chttpd_auth_request.erl +++ b/src/chttpd/src/chttpd_auth_request.erl @@ -61,7 +61,7 @@ authorize_request_int(#httpd{path_parts=[_DbName], method='PUT'}=Req) -> require_admin(Req); authorize_request_int(#httpd{path_parts=[_DbName], method='DELETE'}=Req) -> require_admin(Req); -authorize_request_int(#httpd{path_parts=[_DbName, <<"_compact">>]}=Req) -> +authorize_request_int(#httpd{path_parts=[_DbName, <<"_compact">>|_]}=Req) -> require_admin(Req); authorize_request_int(#httpd{path_parts=[_DbName, <<"_view_cleanup">>]}=Req) -> require_admin(Req); |