Access control not enforced about loopback-example-access-control

[74monkeys]

Some more info:

If I remove the following acl's then the access control works:
It's as if the property is not been read so it is interpreted as allowing all access.

{
"accessType": "",
"permission": "ALLOW",
"principalType": "ROLE",
"property": "findById",
"principalId": "$owner"
},
{
"accessType": "",
"permission": "ALLOW",
"principalType": "ROLE",
"property": "updateAttributes",
"principalId": "$owner"
},
{
"accessType": "*",
"permission": "ALLOW",
"principalType": "ROLE",
"property": "logout",
"principalId": "$everyone"
}

[ritch]

@74monkeys Thanks for the report. I'm marking this as a bug and opening up a related bug in the loopback repo:

strongloop/loopback#115

[crandmck]

As strongloop/loopback#115 has been closed, I'm going to close this as well.