From dd7fad8e96c93b933d4515fc2dc5c7aebaaff115 Mon Sep 17 00:00:00 2001 From: Florent Vilmart Date: Wed, 16 Mar 2016 23:07:51 -0400 Subject: [PATCH] Allows Operations on Roles --- src/rest.js | 5 ----- 1 file changed, 5 deletions(-) diff --git a/src/rest.js b/src/rest.js index 96269bc71c..82821549c8 100644 --- a/src/rest.js +++ b/src/rest.js @@ -115,11 +115,6 @@ function update(config, auth, className, objectId, restObject) { // Disallowing access to the _Role collection except by master key function enforceRoleSecurity(method, className, auth) { - if (className === '_Role' && !auth.isMaster) { - throw new Parse.Error(Parse.Error.OPERATION_FORBIDDEN, - 'Clients aren\'t allowed to perform the ' + - method + ' operation on the role collection.'); - } if (method === 'delete' && className === '_Installation' && !auth.isMaster) { throw new Parse.Error(Parse.Error.OPERATION_FORBIDDEN, 'Clients aren\'t allowed to perform the ' +