Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP

Loading…

accessControl still allows access to collection #50

Closed
Ziink opened this Issue · 1 comment

2 participants

@Ziink

App uses mongoDB which has a collection 'ziink' with a few documents.

In server/index.js
  store.query.expose('ziink', 'test', function(id) {
    return {name: 'ziink'};
  });

  store.accessControl = true;
  store.queryAccess('ziink', 'test', function (id, accept) {
    accept(false);
  });

In app/index.js

ready(function(model) {
  window.model = model;
});

In browser

    model.query('ziink').fetch(function(err, users){console.log(users.get())})

This fetches all documents.

Derby should not allow any access to data that is not explicitly allowed when accessControl is true.

@nateps
Owner

No longer relevant in 0.5

@nateps nateps closed this
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.