Security issue

Ask the community
, ,
1

Hi, I have the following use case:
I have an external DB containing leads belonging to multiple users (sales persons) users are site members with assigned role (so have to be logged in to view data).
I would like each sales person to see only leads associated with him.

I know I can get the current user email using the wix-users and use the email (or another ID attached to this email as the identifier for the external DB.
My question is, since the FE script is exposed with clear text, couldn’t anyone change the fetch data (e.g. replace the email when fetching external data) and see another user leads? (when users work in same agency the email is not a big secret.
See pseudo-example below

//Getting current user
wixUsers.currentUser.getEmail()
 .then((userRes) => {
 //fetching the user leads
            getUserLeads(userRes) //Anyone can see this line and replace userRes with an email string to his liking
 return GID(userRes)
 })

I know I can use “external collections” with adapter and attach a dataset with a filter, but I have same issue with local collections and anyway I would like to avoid this if possible.

Even putting this code in ‘onReady’ won’t help as I see it as anyone can see the logic and copy it to another place and run it.

Appreciate any suggestions
Thanks

2

Please read this and the other of Giri’s FAQs…
https://www.wix.com/velo/forum/tips-tutorials-examples/giri-gives-a-fac-3-we-can-see-your-code-but-how

3

Hi Dima, I’ve read her FAC and indeed it contains interesting information, I already avoid having any sensitive data in FE but nevertheless I still need to provide user specific data and avoid giving one user the option to view other users data. I thought about doing the check on the user email in BE - this will prevent user from being able to mask as a different user.
?

4

You have several options…

  1. email
  2. user-ID
  3. owner-ID

You will know the best, which option to take. All i can suggest after do a quick reading of your post is to do it at the backend-if you are working with sensitive data.
Even using wix-secrets if needed.
Perhaps you should ask GIRI, he will know best, since he has worked out almost a whole bible related to this topic.