Florent Vilmart 3bcb5a0997 Ensure User ACL's are more flexible and secure #3588 (#4860) ...

* Fixes an issue that would let the beforeDelete be called when user has no access to the object

* Ensure we properly lock user

- Improves find method so we can attempt to read for a write poking the right ACL instead of using masterKey
- This ensure we do not run beforeDelete/beforeFind/beforeSave in the wrong scenarios

* nits

* Caps insufficient

2018-06-28 16:31:22 -04:00

48 KiB

Raw Blame History

View Raw