it does not need to run as a root user, but running it as one makes things more easy. You can make a user for the node process that has only access to certain things and certain paths
Hi, Paul.
Sounds like you're talking about REST API. And that your are overwriting data with older values if B managed to read record before A finished to update it. Classic conflict resolution ...