SkygearIO / chat

Skygear Plugin - Chat SDK
Apache License 2.0
17 stars 18 forks source link

Messages are saved with null acl that allow public read #232

Closed Steven-Chan closed 5 years ago

Steven-Chan commented 5 years ago

Related issues:

Related code:

It was expected that only participants of the conversation have read and write permission to the messages.

However, it has been found that newly created messages have _access to be NULL, which would allow public to read.