Deployd/Deployd — Issue #6: Search Doesn't Follow Permissions
Author: ritch
Created: 2011-12-09 01:53:22+00:00
State: open
Labels: beta, security

Search needs to be revisited in a way that it obeys the permissions of the collection it is searching. Currently search gives access to read the entire collection without any restrictions. The search plugin should be refactored in a way that will only expose collections via the correlated collection or model.