allow hidden in permissions manager

This commit is contained in:
Ben Irvin 2023-08-25 12:38:42 +02:00
parent 97576fdaad
commit 6a73f62377
2 changed files with 0 additions and 6 deletions

View File

@ -110,9 +110,6 @@ describe('Permissions Manager - Validate', () => {
['filters', 'password', { filters: { c: 'Foo', b: 'Bar' } }, 'b'],
['sort', 'password', { sort: { c: 'Foo', b: 'Bar' } }, 'b'],
['fields', 'password', { fields: ['c', 'b'] }, 'b'],
['filters', 'hidden', { filters: { c: 'Foo', a: 'Bar' } }, 'a'],
['sort', 'hidden', { sort: { c: 'Foo', a: 'Bar' } }, 'a'],
['fields', 'hidden', { fields: ['c', 'a'] }, 'a'],
])('Throws on %s with %s', async (key, type, data, invalidParam) => {
expect(async () => {
await validateHelpers.validateQuery(data, { subject: fooModel.uid });

View File

@ -60,7 +60,6 @@ module.exports = ({ action, ability, model }) => {
const validateFilters = pipeAsync(
traverse.traverseQueryFilters(throwDisallowedFields(permittedFields), { schema }),
traverse.traverseQueryFilters(throwDisallowedAdminUserFields, { schema }),
traverse.traverseQueryFilters(throwHiddenFields, { schema }),
traverse.traverseQueryFilters(throwPassword, { schema }),
traverse.traverseQueryFilters(
({ key, value }) => {
@ -75,7 +74,6 @@ module.exports = ({ action, ability, model }) => {
const validateSort = pipeAsync(
traverse.traverseQuerySort(throwDisallowedFields(permittedFields), { schema }),
traverse.traverseQuerySort(throwDisallowedAdminUserFields, { schema }),
traverse.traverseQuerySort(throwHiddenFields, { schema }),
traverse.traverseQuerySort(throwPassword, { schema }),
traverse.traverseQuerySort(
({ key, attribute, value }) => {
@ -89,7 +87,6 @@ module.exports = ({ action, ability, model }) => {
const validateFields = pipeAsync(
traverse.traverseQueryFields(throwDisallowedFields(permittedFields), { schema }),
traverse.traverseQueryFields(throwHiddenFields, { schema }),
traverse.traverseQueryFields(throwPassword, { schema })
);