title: Parse - Using User ACLs to share user information
body: <p>I've got a question about the best way to allow user's information to be visible between users in certain situations.</p>
  
  <p>For example, my app will have a "FriendRequest" class to model friend requests between users. The "FriendRequest" class has two User pointers, "toUser" and "fromUser".</p>
  
  <p>I also set a default ACL for all user objects to restrict access to that user only for read/write.</p>
  
  <p>My question is, when a user sends a friend request, I add the pointers for each user, and set the ACL of the "FriendRequest" object to allow both users to read and write to that object. However, when the user retrieves the friend request data, the "fromUser" data is not returned from the query because the ACL of the "fromUser" allows access to only that user - not to the other user who receives the friend request.</p>
  
  <p>What is the best way to allow this data to be visible? Whenever a "FriendRequest" is created, should I add read permissions to the "fromUser" ACL for the "toUser" to be able to read it's information?</p>
  
  <p>Any help is appreciated!</p>
  
  <p>Thanks</p>