always allow file upload with master key

Author: mtrezza

spec/ParseFile.spec.js

@@ -885,6 +885,18 @@ describe('Parse.File testing', () => {
       await expectAsync(file.save({ sessionToken: authUser.getSessionToken() })).toBeResolved();
     });
 
+    fit('allows file upload with master key', async () => {
+      await reconfigureServer({
+        fileUpload: {
+          enableForPublic: false,
+          enableForAnonymousUser: false,
+          enableForAuthenticatedUser: false,
+        },
+      });
+      let file = new Parse.File('hello.txt', data, 'text/plain');
+      await expectAsync(file.save({ useMasterKey: true })).toBeResolved();
+    });
+
     it('rejects all file uploads', async () => {
       await reconfigureServer({
         fileUpload: {

src/Routers/FilesRouter.js

@@ -95,22 +95,23 @@ export class FilesRouter {
   async createHandler(req, res, next) {
     const config = req.config;
     const user = req.auth.user;
+    const isMaster = req.auth.isMaster;
     const isLinked = user && Parse.AnonymousUtils.isLinked(user);
-    if (!config.fileUpload.enableForAnonymousUser && isLinked) {
+    if (!isMaster && !config.fileUpload.enableForAnonymousUser && isLinked) {
       next(new Parse.Error(
         Parse.Error.FILE_SAVE_ERROR,
         'File upload by anonymous user is disabled.'
       ));
       return;
     }
-    if (!config.fileUpload.enableForAuthenticatedUser && !isLinked && user) {
+    if (!isMaster && !config.fileUpload.enableForAuthenticatedUser && !isLinked && user) {
       next(new Parse.Error(
         Parse.Error.FILE_SAVE_ERROR,
         'File upload by authenticated user is disabled.'
       ));
       return;
     }
-    if (!config.fileUpload.enableForPublic && !user) {
+    if (!isMaster && !config.fileUpload.enableForPublic && !user) {
       next(new Parse.Error(Parse.Error.FILE_SAVE_ERROR, 'File upload by public is disabled.'));
       return;
     }