useMasterKey in cloudCode not working as expected

[REggar]

We had some Cloud Code like this in Parse:

Parse.Cloud.define('deleteUser', function (request, response) {`
    var User = Parse.Object.extend('_User');
    var query = new Parse.Query(User);

    query.get(request.params.user).then(function (result) {
        result.destroy();
    }).then(function (results) {
        response.success('User deleted');
    }, function (error) {
        response.error(error);
    })
});

It worked fine in Cloud Code however, it seems to be broken in parse-server, on debugging it looks like Parse.Cloud.useMasterKey(); is not being applied to the options of all ParseObject calls. This is required because the ACL prevents anyone creating additional items in the table.

[wagnercsfilho]

#13 In the top of the cloud code file, try:

Parse.serverURL = 'http://localhost:1337/parse';

[REggar]

No such luck, it's worth adding that I'm getting errors on .save() of ParseObjects as well.

[gfosco]

Will take a look at this...

[silvermana]

+1. I can't .save() objects in Cloud Code via parse-sever if it requires useMasterKey(). In a beforeSave() function if I return success() early (before I create/save a protected object) it works fine, but if the code to create/save a sub-object runs I get an error:

ParseError { code: 141, message: 'User beforeSave error = 2 the service is currently unavailable' }

EDIT: I found the answer to my problem: #132

[gfosco]

Much like how Parse.User.current() is invalid in a node script, because of the global nature, so is Parse.Cloud.useMasterKey(), because it is global and it would cause other requests to use the master key even if it was not intended.

The correct approach is to always pass a useMasterKey: true option to saves and queries which need to use the master key. We are going to document this as soon as possible, but I wanted to get this out to you and be able to close some issues.

In a save call, the options block is the second param:

obj.save(null, { useMasterKey: true });

In a query, it's the first.

q.get({ useMasterKey: true }).then(.......)
q.find({ useMasterKey: true}).then(......)

Please update your code to follow this and open a new issue if you have problems. Thank you!

[sivi29y]

@gfosco you should move this info to the guide imho.

some people like myself with not a lot of node js experience will find it helpful

[OxyFlax]

I have the same problem, I tried to use @gfosco answer but I think I did it wrong. Could you help me? I read https://github.com/ParsePlatform/Parse-Server/wiki/Compatibility-with-Hosted-Parse#Cloud-Code too but it doesn't seem to work.

Parse.Cloud.define("removeFriendRequest", function(request, response) {
  Parse.Cloud.useMasterKey();

  console.log("removeFriendRequest: remove userid: " + request.params.userIdToRemove + " from user: " + request.params.userId);
  var query = new Parse.Query(Parse.User);
  query.equalTo("objectId", request.params.userId);

  // Get the first user which matches the above constraints.
  query.first({
    success: function(anotherUser) {
        anotherUser.remove("friends", request.params.userIdToRemove);
        anotherUser.save(null, {
        success: function(user) {
          response.success("removeFriendRequest updated");
        },
        error: function(user, error) {
          response.error(error);
        }
        });
    }
  });
});

Parse.Cloud.define("addGroupChatCount", function(request, response) {
  Parse.Cloud.useMasterKey();

  console.log("addGroupChatCount: added userid: " + request.params.userId + " for users: " + request.params.userIds + " for weevent: " + request.params.weeventId);
  var GroupMessage = Parse.Object.extend("GroupMessage");
  var query = new Parse.Query(GroupMessage);
  query.containedIn("fromId", request.params.userIds);
  query.equalTo("weeventId", request.params.weeventId);

  // Get the first user which matches the above constraints.
  query.find({ 
    success: function(results) {
      for (var i = 0; i < results.length; i++) {
        var result = results[i];
        result.increment("unreadAmount");
      };
      Parse.Object.saveAll(results, {
        success: function(list){
          response.success("add group chat succeeded");
        },
        error: function(error){
          response.error(error);
        }
      });
    }
  });
});

PS: This is the original code, I can give you what I tried if you want.

EDIT: Problem solved.

[TheRyanHickman]

@OxyFlax It would be great if you shared what you did to make your code above work.

[khanamir]

@gfosco What should be the syntax for setting useMasterKey: true in:

var query = new Parse.Query(Parse.Installation); query.containedIn("user", userList);

because for push notifications, we don't call find or fetch

[code-K]

@gfosco I would also need to know the new syntax about useMasterKey: true if I would like to use it on
query.equalTo('user', request.object.get("createdBy"));

So for push...

Thanks much for feedback and best regards,
Chris