3 ms·
I disagree. I bet if the default was no access, developers would simply enable all access (and not even realize they could restrict access to authenticated user
by z5h 8y ago
I disagree. I bet if the default was no access, developers would simply enable all access (and not even realize they could restrict access to authenticated users).
So the default is likely much safer than what would otherwise happen.
Let's not forget that there is a security/permissions testing feature built right into Firebase. It would literally take 1 minute for a dev to ask and test: hey, can people read each other's data?
- rhizome 8y agodevelopers would simply enable all access (and not even realize they could restrict access to authenticated users). So the default is likely much safer than what would otherwise happen. That's not what "safer" means. You cannot say that that's what would happen, either.