accessControl still allows access to collection #50

Ziink opened this Issue Nov 11, 2012 · 1 comment


None yet
2 participants

Ziink commented Nov 11, 2012

App uses mongoDB which has a collection 'ziink' with a few documents.

In server/index.js
  store.query.expose('ziink', 'test', function(id) {
    return {name: 'ziink'};

  store.accessControl = true;
  store.queryAccess('ziink', 'test', function (id, accept) {

In app/index.js

ready(function(model) {
  window.model = model;

In browser

    model.query('ziink').fetch(function(err, users){console.log(users.get())})

This fetches all documents.

Derby should not allow any access to data that is not explicitly allowed when accessControl is true.


This comment has been minimized.

Show comment Hide comment

nateps Jun 4, 2013


No longer relevant in 0.5


nateps commented Jun 4, 2013

No longer relevant in 0.5

@nateps nateps closed this Jun 4, 2013

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment