CODEWITHSUNDEEP
node.jsderbyjsracerjs
Dmitry Demidenko
Dmitry Demidenko

Reputation: 3407

Derby.js (Racer) access control

I'm new in Derby.js environment, and as far as I see Racer is exposing all the data on client side.

So, basically anybody could manipulate any data stored on server? Am I correct? Is there any way to manage access control?

Upvotes: 6

Views: 491

Answers (3)

curran
curran

Reputation: 1316

It seems share-access is now deprecated in favor of sharedb-access.

Here's a related discussion on the Derby mailing list "racer-access deprecated".

Upvotes: 0

KNOFF
KNOFF

Reputation: 441

At now racer-access is deprecated. You can use share-access.

Upvotes: 2

Vladimir Makhaev
Vladimir Makhaev

Reputation: 1104

There is plugin for Racer - racer-access

Use it like this:

var racerAccess = require('racer-access');
derby.use(racerAccess);
store.allow('change', 'users', function (some usefull arguments) {
    return true || false;
});

Upvotes: 7

Related Questions