parse-community / parse-php-sdk

The PHP SDK for Parse Platform
https://parseplatform.org/
Other
811 stars 346 forks source link

Unable to retrieve/read users emails. #385

Closed shadyabouelmakarem closed 6 years ago

shadyabouelmakarem commented 6 years ago

Issue Description

When I try to retrieve users data from the "User" table, I don't get any email within the retrieved users objects, the only email that is retrieved is the current user email. I also checked the ACL and public has read access.

Steps to reproduce

1- I initiate a simple parse query on the "_User" class or I initiate a simple parse user query. 2- Call the find() function and store the output in a variable called "$results". 3- loop on "$results" and use the encode() function on each result, then push it to an array called "$members", then I send it with the response to the client side. 4- on the client side I retrieve all the data excluding the email key and value.

Environment Details

Logs/Traces

none.

montymxb commented 6 years ago

This is a feature in parse server 2.3.0 that was added due to concerns of anyone requesting any users and getting their emails. It is considered an unsafe leaking of PII and is removed from results.

If I am correct you can use the masterKey in your query request to include the omitted email field from user queries.

shadyabouelmakarem commented 6 years ago

Thanks @montymxb , I can now get the users E-mails, I had to use the masterKey in the find() query just as you said.