From f75905465ed3d4141a74353a72fb06e4b078446e Mon Sep 17 00:00:00 2001 From: Charlie Schliesser Date: Tue, 30 May 2023 14:16:57 -0500 Subject: [PATCH 1/2] Don't apply permissions.conditions to associations. --- src/resolvers/query.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/resolvers/query.js b/src/resolvers/query.js index 0bc3741..d9998bc 100644 --- a/src/resolvers/query.js +++ b/src/resolvers/query.js @@ -76,7 +76,7 @@ module.exports = (options) => { findOptions.include = includes; } - if (permissions && permissions.conditions) { + if (!isAssociation && permissions?.conditions) { const clauses = permissions.conditions.reduce((all, condition) => { @@ -123,4 +123,4 @@ module.exports = (options) => { return data; }; -}; \ No newline at end of file +}; From fa5af44783112ea35bac63270d400230caaee8e2 Mon Sep 17 00:00:00 2001 From: Charlie Schliesser Date: Tue, 30 May 2023 14:22:46 -0500 Subject: [PATCH 2/2] ... --- src/resolvers/query.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/resolvers/query.js b/src/resolvers/query.js index d9998bc..18e4687 100644 --- a/src/resolvers/query.js +++ b/src/resolvers/query.js @@ -77,7 +77,7 @@ module.exports = (options) => { } if (!isAssociation && permissions?.conditions) { - + const clauses = permissions.conditions.reduce((all, condition) => { if (typeof condition.value === 'string' && condition.value.startsWith(':')) {