mirror of
https://github.com/strapi/strapi.git
synced 2025-12-27 15:13:21 +00:00
allow hidden in permissions manager
This commit is contained in:
parent
97576fdaad
commit
6a73f62377
@ -110,9 +110,6 @@ describe('Permissions Manager - Validate', () => {
|
||||
['filters', 'password', { filters: { c: 'Foo', b: 'Bar' } }, 'b'],
|
||||
['sort', 'password', { sort: { c: 'Foo', b: 'Bar' } }, 'b'],
|
||||
['fields', 'password', { fields: ['c', 'b'] }, 'b'],
|
||||
['filters', 'hidden', { filters: { c: 'Foo', a: 'Bar' } }, 'a'],
|
||||
['sort', 'hidden', { sort: { c: 'Foo', a: 'Bar' } }, 'a'],
|
||||
['fields', 'hidden', { fields: ['c', 'a'] }, 'a'],
|
||||
])('Throws on %s with %s', async (key, type, data, invalidParam) => {
|
||||
expect(async () => {
|
||||
await validateHelpers.validateQuery(data, { subject: fooModel.uid });
|
||||
|
||||
@ -60,7 +60,6 @@ module.exports = ({ action, ability, model }) => {
|
||||
const validateFilters = pipeAsync(
|
||||
traverse.traverseQueryFilters(throwDisallowedFields(permittedFields), { schema }),
|
||||
traverse.traverseQueryFilters(throwDisallowedAdminUserFields, { schema }),
|
||||
traverse.traverseQueryFilters(throwHiddenFields, { schema }),
|
||||
traverse.traverseQueryFilters(throwPassword, { schema }),
|
||||
traverse.traverseQueryFilters(
|
||||
({ key, value }) => {
|
||||
@ -75,7 +74,6 @@ module.exports = ({ action, ability, model }) => {
|
||||
const validateSort = pipeAsync(
|
||||
traverse.traverseQuerySort(throwDisallowedFields(permittedFields), { schema }),
|
||||
traverse.traverseQuerySort(throwDisallowedAdminUserFields, { schema }),
|
||||
traverse.traverseQuerySort(throwHiddenFields, { schema }),
|
||||
traverse.traverseQuerySort(throwPassword, { schema }),
|
||||
traverse.traverseQuerySort(
|
||||
({ key, attribute, value }) => {
|
||||
@ -89,7 +87,6 @@ module.exports = ({ action, ability, model }) => {
|
||||
|
||||
const validateFields = pipeAsync(
|
||||
traverse.traverseQueryFields(throwDisallowedFields(permittedFields), { schema }),
|
||||
traverse.traverseQueryFields(throwHiddenFields, { schema }),
|
||||
traverse.traverseQueryFields(throwPassword, { schema })
|
||||
);
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user