Security - ACL control - OwnerId of Object (iOS)

Hello,

I just notice that when I create a new object, it does not set the OwnerId with the current logged in user.

http://support.backendless.com/public/attachments/c5866fa7db37829bb0942578ab328205.png</img>

http://support.backendless.com/public/attachments/490e812a4d36ba857bdef2282cdfcedf.png</img>

Is this a bug? Based on the documentation, the ownerId should be automatically set to current user. Or I got some misunderstanding here.

c5866fa7db37829bb0942578ab328205.png

Yes, this is a bug, but it is in your application. Check the logic and make sure there is a logged in user at the time when you save a new object.

Your are right, Mark.

How does the ACL of user object work? The ownerId of user object will always be empty. Does it mean all other users are able to update or even delete user object? Or it can only be modified by the user itself by default?

Object ACL is a complex subject. Here’s a whole webinar dedicated to it: https://www.youtube.com/watch?v=AOyhtu1DOus I am sure you will find the answer there.

Thanks! :slight_smile: