facebook - Is it okay to configure Parse User with public "get" class-level permission? -

-

i'm in process of designing data model ios application i'm using parse backend (first time using parse)

every user of application has both private data should readable , writable owner of data , public data should readable everyone.

i'm considering keeping publicly readable data stored in parse's built in user object , private data in custom object. there downside this? app uses facebook login exclusively and, thus, when user created authdata field populated "facebook: 12345..." is having accessible security problem?

in scenario user object (my public data) need "get" not "find" permissions, need readable knows objectid. rules out dumping entire user's table.

i've read through documentation , "sensitivity" of each user's authdata wasn't clear. i realize if using traditional username/password scheme problem, facebook login? help/tips appreciated.

edit: printed entire user object console on test client (with another, different user logged in) , authdata wasn't returned. right assume suggested strategy wouldn't problem then? authdata appears "special" field isn't returned if user fetches it.


Comments

Post a Comment

Popular posts from this blog

javascript - How to process users in one specific order using map o each function? -

-
i create cloud function process items in specific order , make network request api each item , update them result of api. i tried this. order not respected , computation of "remainingcredits" wrong. note function "getuserpageview()" make api call , return promise result. query.descending("createdat"); return query.find().then(function(items) { var remainingcredits=0; var promises= _.map(items, function(item){ var credit=item.get("credit_buy"); return getuserpageview(123, new date()).then(function(pageviews){ var usedcredit=credit-pageviews; if(remainingcredits>0) return remainingcredits+credit; if(credit-usedcredit<=0){ console.log("usedcredit:"+usedcredit); item.set("used",true); return 0; }else{ remainingc...
Read more

java - Two interface have same method name with different return type -

-
this question understanding interfaces in java. here simple example of implementing interfaces in java. interface parenta { void display(); } interface parentb { int display(); } class child implements parenta, parentb { @override public void display() { system.err.println("child parenta"); } //error : return type incompatible parentb.display() //so added method int return type @override public int display() { system.err.println("child parentb"); } } this case can happen in large java application 2 interface can have method same name. thought since return type different jvm know interface's method overriding. what best explanation this? situation make sense? thanks in advance because method same signature not allowed, confuses compiler detect exact override-equivalent method declared once. jls (§8.4.2) 2 methods or constructors, m , n, have same signature if have, ...
Read more

javascript - Linking from page A to a specific iframe on page B -

-
i'm in process of setting website showcase our photographs. for using third party supplier providing gallery: http://gallery.wisejam.com/index.html . however, in order keep visitors on our own website, have set gallery on page iframe: http://wisejam.com/gallery-2/ up here, works fine. now, cannot go further when wish deep link post/page photograph open in iframe. it works long visitor on page (gallery-2) following code... <a href="http://gallery.wisejam.com/featured/distortion-clear-waters-robert-schaelike.html" target="iframe_a">distortion</a> however, i'm trying achieve internal links display in iframe of 'gallery-2', not have send them artists' page. wish keep visitors us! i'm sorry if simple question ask i'm not professional programmer. many input , help! you write : target="iframe_a" photos go frame named : name="iframe_a" . please check . if upload full code able gi...
Read more