3dbeginner
BRBuildShip + Rowy
•Created by 3dbeginner on 6/17/2023 in #💬・general
are audit keys like updatedBy visible to
yeah, I get how that can be done. I think if auditing is as easy a checkbox, it might be good to either have a note next to it about what data is being placed on the document and made available to all with access to the document, or provide some autogenerated access control configuration for these
4 replies
BRBuildShip + Rowy
•Created by 3dbeginner on 6/17/2023 in #💬・general
are audit keys like updatedBy visible to
so I've been looking at this further and it does seem that the user managing the content will have their name, email, and google user profile picture leaked under the _updatedBy key (assuming your customer facing site makes client side requests direct to firestore). Is there a way to scrub this? Or is server side processing/rendering the recommended pattern for apps?
4 replies