accessControl still allows access to collection #50

Closed
Ziink opened this Issue Nov 11, 2012 · 1 comment

Comments

Projects
None yet
2 participants
@Ziink

Ziink commented Nov 11, 2012

App uses mongoDB which has a collection 'ziink' with a few documents.

In server/index.js
  store.query.expose('ziink', 'test', function(id) {
    return {name: 'ziink'};
  });

  store.accessControl = true;
  store.queryAccess('ziink', 'test', function (id, accept) {
    accept(false);
  });

In app/index.js

ready(function(model) {
  window.model = model;
});

In browser

    model.query('ziink').fetch(function(err, users){console.log(users.get())})

This fetches all documents.

Derby should not allow any access to data that is not explicitly allowed when accessControl is true.

@nateps

This comment has been minimized.

Show comment Hide comment
@nateps

nateps Jun 4, 2013

Contributor

No longer relevant in 0.5

Contributor

nateps commented Jun 4, 2013

No longer relevant in 0.5

@nateps nateps closed this Jun 4, 2013

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment