feat: Remove deprecation DEPPS3: Config option enforcePrivateUsers defaults to true (#8283)

BREAKING CHANGE: The Parse Server option `enforcePrivateUsers` is set to `true` by default; in previous releases this option defaults to `false`; this change improves the default security configuration of Parse Server (#8283)
2022-11-17 08:59:44 +11:00
parent 6e66b20e28
commit ed499e32a2
12 changed files with 85 additions and 17 deletions
--- a/src/Options/Definitions.js
+++ b/src/Options/Definitions.js
@@ -217,7 +217,7 @@ module.exports.ParseServerOptions = {
    env: 'PARSE_SERVER_ENFORCE_PRIVATE_USERS',
    help: 'Set to true if new users should be created without public read and write access.',
    action: parsers.booleanParser,
-    default: false,
+    default: true,
  },
  expireInactiveSessions: {
    env: 'PARSE_SERVER_EXPIRE_INACTIVE_SESSIONS',