Completely forbid the client to add / modify data

  1. ACL / CLP allows users to modify data,

  2. Completely forbid the client to add / modify data,

  3. Users can call cloud function, and cloud function can modify data without using masterkey
    I didn’t find the corresponding settings in parse - server config. Is there any way to meet this scenario,

I don’t want the user to modify the data on the client, but modify the data within the permission through cloudfunction

You can turn off writing permissions in the CLO for all classes, either from the Parse Dashboard or programmatically. Check the Parse Documentation on how to modify schemas.