CLP setting for builtin classes like Session, User

[gkrcode]

Default CLP settings for Session and User classes in parse-dashboard allows all (get, find, create, update, delete, add field) operations. My code does not directly access class like Session. It all done by Parse SDK. I am not sure what is the correct CLP setting for these classes

[flovilmart]

I recommend you head over to stack overflow for those questions. By default, _Session is secure and can't be queried eternally without a proper access token.

For _User, by default, the CLP are open, and only the 'currentUser' can write to it's user object.