I have data fields that are private and some is public, I noticed that if i am is not logged in and avoided cookies… I can see and access the private fields. If i accept opt cookies whether logged in or not, everything works perfect.
How this could happen? from logic it seems that if some one is not accepted cookies, he will be like ghost without boots.
Do you have ‘ignore empty constraints’ ticked on the search? If so perhaps the expression is not working correctly as if the user is not logged in, part of it will be missed as the search is null and will be skipped.
Even if you are not logged in to a bubble app, you have a User ID via cookies as a not logged in user. If you don’t accept cookies then I guess your UID is null.
Well you have to deliberate between what is required to access your app and your users privacy. It is not unusual for a web app to have a notice that says that cookies are required to use this website if browsed in privacy mode. If your app breaks because of fundamental privacy vulnerability, it needs to be redesigned to work securely. You also need to set your privacy settings to make sure that records can not be accessed.