Function setupProtectedClass

spec/vulnerabilities.spec.js:3697–3717

(className)

      }

      async function setupProtectedClass(className) {
        const config = Config.get(Parse.applicationId);
        const schemaController = await config.database.loadSchema();
        await schemaController.addClassIfNotExists(className, {
          secretField: { type: 'String' },
          publicField: { type: 'String' },
        });
        await schemaController.updateClass(
          className,
          {},
          {
            find: { '*': true },
            get: { '*': true },
            create: { '*': true },
            update: { '*': true },
            delete: { '*': true },
            addField: {},
            protectedFields: { '*': ['secretField'] },
          }
        );
      }

      it('should deliver protected fields to master key LiveQuery client', async () => {
        const className = 'MasterKeyProtectedClass';