User able to write over data

Report a Bug
1

Woke up to find that my user row had been overwritten with data from another user. Luckily this was spotted in time and it doesn’t seem to have impacted things on the app.

But this hasn’t happened to me before and I’m very confused as to how this has been possible! It’s also concerning as if this was done by someone with nefarious intent, it could be disastrous.

Any guidance on how to prevent this happening again would be much appreciated.

2

You either need to:

  • Use row owners, or
  • Filter (and allow editing) where email is signed in user

The first option is the most secure.

3 Likes
3

Thank you Darren!

4

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.