Remove write access from _User

[Samigos]

Parse Server version: 2.7.4

I'm trying to remove the write access from users, as a security measure. This is the acl I use:

var custom_acl = new Parse.ACL();
			
custom_acl.setReadAccess(userObject, true);
custom_acl.setPublicWriteAccess(false);

userObject.setACL(custom_acl);

userObject.save(null, {useMasterKey: true});

But it doesn't work! After that, I have the read access set correctly, and it continues to have a write access for that user.

Any idea on why this is happening?

[flovilmart]

See parse-community/parse-server#4860 and related issues. You can use the master branch of parse server to try out if it fixes the issue .

[Samigos]

The link is invalid...

[flovilmart]

@Samigos sorry about that, I just updated it