Forum BigDB one user can delete PlayerObjects another

Discussion and help relating to the PlayerIO database solution, BigDB.

one user can delete PlayerObjects another

Postby Neutrino » June 27th, 2011, 1:01 pm

Iam now create simpleConnect from one user and deleted key in PlayerObjects another user
example
Code: Select all
private var login = "fff"
      private var pass = "fff"
      private function Login(){
         PlayerIO.quickConnect.simpleConnect(
            stage,
            'blablabla',
            login,
            pass,
            function(client:Client):void{
               trace("Все отлично, мы снова в матрице!")               
               handleConnect(client)
            },
            function(e:PlayerIOError):void{
               trace(e)               
            }
         )
      }
      private function handleConnect(client:Client):void{         
         client.bigDB.deleteKeys("PlayerObjects", new Array("simpleeee"),
            function():void{
               trace("cool");
            },
            function(e:PlayerIOError):void{
               trace(e)
            }
         )
      }
Neutrino
 
Posts: 12
Joined: April 26th, 2011, 2:20 pm

Re: one user can delete PlayerObjects another

Postby Benjaminsen » June 27th, 2011, 1:16 pm

This is only possible if you configure your BigDB access such that it's not secure.

Under the settings of your connection uncheck the Delete access right.

Image
Benjaminsen
.IO
 
Posts: 1444
Joined: January 12th, 2010, 11:54 am
Location: Denmark

Re: one user can delete PlayerObjects another

Postby Neutrino » June 27th, 2011, 1:29 pm

I have now standart public connection
delete is uncheck
Attachments
1.jpg
1.jpg (126.74 KiB) Viewed 8503 times
Neutrino
 
Posts: 12
Joined: April 26th, 2011, 2:20 pm

Re: one user can delete PlayerObjects another

Postby Neutrino » June 27th, 2011, 1:46 pm

May be I create two accounts from one ip
Neutrino
 
Posts: 12
Joined: April 26th, 2011, 2:20 pm

Re: one user can delete PlayerObjects another

Postby Henrik » July 23rd, 2011, 1:43 am

This bug is now fixed. For some weird reason it was possible to delete the objects of other players if there were no indexes on the table, otherwise you got the correct error message.
Henrik
.IO
 
Posts: 1880
Joined: January 4th, 2010, 1:53 pm


Return to BigDB



cron