# ACL disable Public Read by default

**URL:** <https://community.parseplatform.org/t/acl-disable-public-read-by-default/3363>\
**Category:** Uncategorized\
**Created:** [April 2, 2023, 12:33pm UTC](https://community.parseplatform.org/t/acl-disable-public-read-by-default/3363 "2023-04-02T12:33:26Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mgerar](https://community.parseplatform.org/letter_avatar_proxy/v4/letter/m/cc9497/32.png) [@mgerar](https://community.parseplatform.org/u/mgerar)\
**Post date:** [April 2, 2023, 12:33pm UTC](https://community.parseplatform.org/t/acl-disable-public-read-by-default/3363/1 "2023-04-02T12:33:26Z")

</div>

Hi, when a user is created in the \_User table, I see that automatically the ACL has both a “Public Read” enabled, together with the specific ObjectId with “read, write” permissions.

I’d like to keep by default on the server the only objectId in the ACL with read and write, disabling the “Public Read”

How can I set this as default, is there a way in the new ParseServer creation?

Thank you

---

<div class="post-metadata">

**Author:** ![dblythy](https://community.parseplatform.org/user_avatar/community.parseplatform.org/dblythy/32/231_2.png) [@dblythy](https://community.parseplatform.org/u/dblythy)\
**Post date:** [April 2, 2023, 1:13pm UTC](https://community.parseplatform.org/t/acl-disable-public-read-by-default/3363/2 "2023-04-02T13:13:30Z")

</div>

From Parse Server 5.3 (I think) you can set `enforcePrivateUsers` to `false`

---

<div class="post-metadata">

**Author:** ![mgerar](https://community.parseplatform.org/letter_avatar_proxy/v4/letter/m/cc9497/32.png) [@mgerar](https://community.parseplatform.org/u/mgerar)\
**Post date:** [April 2, 2023, 1:22pm UTC](https://community.parseplatform.org/t/acl-disable-public-read-by-default/3363/3 "2023-04-02T13:22:02Z")

</div>

> [@dblythy](#):
>
> enforcePrivateUsers

Thanks, I see from the documentation that this is for

> Set to true if new users should be created without public read and write access.

I’d need not in the CLP but in the ACL to set by default a new record without “Public Read”, that I see is set as a default in the ACL field for every user

---

<div class="post-metadata">

**Author:** ![dblythy](https://community.parseplatform.org/user_avatar/community.parseplatform.org/dblythy/32/231_2.png) [@dblythy](https://community.parseplatform.org/u/dblythy)\
**Post date:** [April 2, 2023, 1:24pm UTC](https://community.parseplatform.org/t/acl-disable-public-read-by-default/3363/4 "2023-04-02T13:24:17Z")

</div>

My mistake, if you set enforcePrivateUsers to `true` users will be created without public read ACL

---

<div class="post-metadata">

**Author:** ![mgerar](https://community.parseplatform.org/letter_avatar_proxy/v4/letter/m/cc9497/32.png) [@mgerar](https://community.parseplatform.org/u/mgerar)\
**Post date:** [April 2, 2023, 1:29pm UTC](https://community.parseplatform.org/t/acl-disable-public-read-by-default/3363/5 "2023-04-02T13:29:56Z")

</div>

thank you! It worked