While using Couchbase Python Client, why don't we provide username and password?

as the title, i use couchbase python client(version 2.2.1), my code as follows:

...
from couchbase import Couchbase
db_connector = Couchbase.connect
db = db_connector(bucket=<bucket_name>, host=<host_ip>)
# db operations(e.g. n1ql_query,get,delete)
...

Although creating the connection to db without username and password,but it can run normally.why? dose that mean if other knows my server’s IP and bucket name, he can also access my couchbase server and do operations?

It means you have a bucket with no password set, and that’s where the accesses are going to.

If you don’t want passwordless access, then simply set a password on the bucket.