Florent Vilmart 3bcb5a0997 Ensure User ACL's are more flexible and secure #3588 (#4860) ...

* Fixes an issue that would let the beforeDelete be called when user has no access to the object

* Ensure we properly lock user

- Improves find method so we can attempt to read for a write poking the right ACL instead of using masterKey
- This ensure we do not run beforeDelete/beforeFind/beforeSave in the wrong scenarios

* nits

* Caps insufficient

2018-06-28 16:31:22 -04:00

..

AggregateRouter.js

Aggregate allow multiple of same stage (#4835)

2018-06-23 11:28:17 -05:00

AnalyticsRouter.js

Reverts calling next() after handling response (#2634)

2016-09-09 17:28:41 -04:00

AudiencesRouter.js

Finding areas that are untested and need love (#4131)

2017-09-05 17:51:11 -04:00

ClassesRouter.js

add includeAll option

2018-06-16 10:16:54 -07:00

CloudCodeRouter.js

feat: Job Scheduling (#3927)

2017-06-14 13:07:00 -04:00

FeaturesRouter.js

Adds push localization feature flag on serverInfo (#4130)

2017-09-01 18:08:02 -04:00

FilesRouter.js

Bump nodejs version to 6+ (#4272)

2017-11-25 15:39:31 -05:00

FunctionsRouter.js

Making response.error accept a Parse.Error object as parameter (#4695)

2018-05-18 10:15:25 -04:00

GlobalConfigRouter.js

Adds support for read-only masterKey (#4297)

2017-10-26 15:35:07 -04:00

HooksRouter.js

More lint tweaking (#3164)

2016-12-02 19:11:54 -05:00

IAPValidationRouter.js

chore(testing): only use TESTING=1 as the testing flag (#3877)

2017-05-29 00:04:25 +03:00

InstallationsRouter.js

Finding areas that are untested and need love (#4131)

2017-09-05 17:51:11 -04:00

LogsRouter.js

fix typo (#2525)

2016-08-15 16:49:45 -04:00

PublicAPIRouter.js

Fix for unhandled undefined config in reset password pages (#4334)

2017-11-11 09:42:20 -05:00

PurgeRouter.js

Fix purging empty class (#4676)

2018-03-25 08:41:25 -05:00

PushRouter.js

Adds support for read-only masterKey (#4297)

2017-10-26 15:35:07 -04:00

RolesRouter.js

Finding areas that are untested and need love (#4131)

2017-09-05 17:51:11 -04:00

SchemasRouter.js

Add Indexes to Schema API (#4240)

2017-11-25 15:39:31 -05:00

SessionsRouter.js

Adds session creation code in Auth.js (#4574)

2018-02-19 11:15:54 -05:00

UsersRouter.js

Ensure User ACL's are more flexible and secure #3588 (#4860)

2018-06-28 16:31:22 -04:00