Struct PermissionOptions 

pub struct PermissionOptions {
    pub protected_fields_owner_exempt: bool,
    pub error_detail: ErrorDetail,
    pub allow_client_class_creation: bool,
}

Options that change what a permission check decides, and what it says when it denies.

Fields

protected_fields_owner_exempt: bool

protectedFieldsOwnerExempt. Upstream tests !== false, so an unset option is exempt and the default is true (DatabaseController.js:1838).

error_detail: ErrorDetail

enableSanitizedErrorResponse, carried here because every denial in this module is one of upstream’s createSanitizedError call sites and needs it.

allow_client_class_creation: bool

allowClientClassCreation (Options/Definitions.js:67-72).

The default is false, and that is the whole reason this option has to exist rather than be left for later. An unimplemented option is silently the permissive value, and here the permissive value lets any caller holding only the app id and client key create classes. Each one gets a _SCHEMA row and a collection on a database parse-server nodes also read, and each has no CLP block, which is default-open. So the gap is not a missing feature, it is a security default flipped open.

Trait Implementations

impl Clone for PermissionOptions

fn clone(&self) -> PermissionOptions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionOptions

fn default() -> Self

Returns the “default value” for a type.