Closed
Description
Is your feature request related to a problem? Please describe.
Considering the evolution of data security and privacy, new developers might assume that Parse Object ACL defaults to private, or requested user R/W only.
I think it could be beneficial to have some server config such as:
defaultACL: 'request.user', // default to give requested user R + W
// or
defaultACL: '', // default to give no one access
and / or
defaultACL : {
'classname': {
"*": "r"
}
}
I think that when a developer new to parse looks at a Parse Object and sees no ACL set, it might be assumed that no one can access the object, when the inverse is true.