yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-07-13 12:02:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixes #1247

Browse Source
This commit is contained in:
Aurelsicoko 2018-05-24 17:20:32 +02:00
parent 0a9fff5a30
commit c111aaba13
10 changed files with 15 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
packages/strapi-plugin-graphql/services/GraphQL.js
View File

@ -328,7 +328,7 @@ module.exports = {
return async (obj, options, context) => {
// Hack to be able to handle permissions for each query.
const ctx = Object.assign(context, {
const ctx = Object.assign(_.clone(context), {
request: Object.assign(_.clone(context.request), {
graphql: null
})
@ -362,6 +362,7 @@ module.exports = {
return values && values.toJSON ? values.toJSON() : values;
}
return resolver.call(null, obj, options, context);
}
@ -560,7 +561,7 @@ module.exports = {
switch (association.nature) {
case 'manyToMany': {
const arrayOfIds = obj[association.alias].map(related => {
const arrayOfIds = (obj[association.alias] || []).map(related => {
return related[ref.primaryKey] || related;
});

6
packages/strapi-plugin-users-permissions/config/policies/permissions.js
View File

@ -39,9 +39,11 @@ module.exports = async (ctx, next) => {
}, []);
if (!permission) {
ctx.forbidden();
if (ctx.request.graphql === null) {
return ctx.request.graphql = strapi.errors.forbidden();
}
return ctx.request.graphql = ctx.body;
ctx.forbidden();
}
// Execute the policies.

1
packages/strapi/lib/middlewares/boom/index.js
View File

@ -19,6 +19,7 @@ module.exports = strapi => {
this.delegator = delegate(strapi.app.context, 'response');
this.createResponses();
strapi.errors = Boom;
strapi.app.use(async (ctx, next) => {
try {
// App logic.