Closed mouyang2001 closed 2 years ago
Admin document collections enabled anyone from writing to it, essentially allowing people to create admin documents with their own id and gain access.
Solved this by updating rules to stop write admin documents. We'll need a backend to secure this feature.
Admin document collections enabled anyone from writing to it, essentially allowing people to create admin documents with their own id and gain access.