Skip to content

Allow option to set Default ACL #7068

Closed
@dblythy

Description

@dblythy

Is your feature request related to a problem? Please describe.
Considering the evolution of data security and privacy, new developers might assume that Parse Object ACL defaults to private, or requested user R/W only.

I think it could be beneficial to have some server config such as:

defaultACL: 'request.user', // default to give requested user R + W
// or
defaultACL: '', // default to give no one access 

and / or

defaultACL : {
  'classname': {
    "*": "r"
  }
}

I think that when a developer new to parse looks at a Parse Object and sees no ACL set, it might be assumed that no one can access the object, when the inverse is true.

A solution could also be ACL options to cloud validator.

Discussed in community forum

Metadata

Metadata

Assignees

No one assigned

    Labels

    state:releasedReleased as stable versionstate:released-alphaReleased as alpha versiontype:featureNew feature or improvement of existing feature

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions