dropyour_records_visibility

io.dropyour/dropyour · Verify this server

Declare the visibility of ONE collection of your graduated app's store. Two values, no policy language. 'partagee' (the default): all in-app reads see the whole collection — today's behaviour, nothing changes. 'par-auteur': each SIGNED-IN visitor only sees and touches their OWN rows (list, get, getMany, count/aggregate, and writes: overwriting or deleting someone else's row is refused); an in-app request with no signed visitor sees an empty set; YOU, the owner, always see everything through MCP and the cockpit. Rows written before authorship existed (author NULL) are visible to no visitor under 'par-auteur' — only to you. What this does NOT cover, so you are not surprised: the shared state blob (app.state) and realtime broadcasts stay visible to everyone — the store is the per-visitor data path. Declared, never derived from your code; reversible with the same call.