-
-
Notifications
You must be signed in to change notification settings - Fork 4.8k
Closed
Labels
state:releasedReleased as stable versionReleased as stable versionstate:released-alphaReleased as alpha versionReleased as alpha versiontype:featureNew feature or improvement of existing featureNew feature or improvement of existing feature
Description
Is your feature request related to a problem? Please describe.
Considering the evolution of data security and privacy, new developers might assume that Parse Object ACL defaults to private, or requested user R/W only.
I think it could be beneficial to have some server config such as:
defaultACL: 'request.user', // default to give requested user R + W
// or
defaultACL: '', // default to give no one access
and / or
defaultACL : {
'classname': {
"*": "r"
}
}
I think that when a developer new to parse looks at a Parse Object and sees no ACL set, it might be assumed that no one can access the object, when the inverse is true.
mtrezza
Metadata
Metadata
Assignees
Labels
state:releasedReleased as stable versionReleased as stable versionstate:released-alphaReleased as alpha versionReleased as alpha versiontype:featureNew feature or improvement of existing featureNew feature or improvement of existing feature