19 Commits

Author SHA1 Message Date
Demian Caldelas
69ce8b5287
Fix sanity check for @casl/ability upgrade #12232 (#12265)
* Fix sanity checks for @casl/ability upgrade

* Add comments for previous commit

* Fix sanity checks for @casl/ability upgrade #12232
2022-01-26 09:55:17 +01:00
harimkims
31259dbf4a Remove unnecessary bracket in the end 2022-01-17 14:13:33 +01:00
Kim, Harim
9e8655716d Refactor code
Co-authored-by: Jean-Sébastien Herbaux <jean-sebastien.herbaux@epitech.eu>
2022-01-17 14:13:33 +01:00
harimkims
de69873606 Fix that returns an empty object when the admin user value is null
Signed-off-by: harimkims <harimkims@gmail.com>
2022-01-17 14:13:33 +01:00
harimkims
2ff2ba860e Fix hasMany admin users making app crash
Signed-off-by: harimkims <harimkims@gmail.com>
2022-01-17 14:13:33 +01:00
Dieter Stinglhamber
ba25b7b651 remove unallowed fields from admin::user relations 2021-11-24 15:15:23 +01:00
Convly
25e62db93a use 'sanitizers' instead of 'utils' 2021-11-10 17:08:54 +01:00
Convly
8d4f8ddd57 Simplify & abstract common sanitize logic 2021-11-08 15:52:42 +01:00
Convly
d6516116b2 Move pipeAsync to @strapi/utils 2021-11-04 16:43:27 +01:00
Jean-Sébastien Herbaux
7f285fb755
[V4] Enhanced sanitize & remove restricted relations from content API's payloads (#11411)
* Rework sanitizeEntity, first iteration

* remove console.log

* Remove useless comments

* Fix e2e tests

* Fix up user e2e test

* Fix remove-restricted-relations visitor

* Handle grapqhql resolver, prevent access to restricted relations

* Handle polymorphic relation in the related visitor

* Remove morph attribute if empty

* Use only the find action to check if the relation is allowed
2021-11-04 15:47:53 +01:00
Pierre Noël
491a662692 clean some code 2021-09-27 12:28:17 +02:00
Pierre Noël
0f123ceb39 fix RBAC 2021-09-27 11:08:48 +02:00
Pierre Noël
d02c7ab741 Use new filters format in the upload plugin 2021-09-27 11:08:47 +02:00
Alexandre Bodin
3784cc5b5e Implement rest api populate syntax and Init refactor convert query params for v4 2021-08-31 19:31:29 +02:00
Alexandre Bodin
47c3900c07 Update createContentType to expose a simpler object 2021-08-23 22:25:31 +02:00
Pierre Noël
682e877644 Merge branch 'v4/backend' into pluginAPI/loadPlugin 2021-08-18 18:37:57 +02:00
Alexandre Bodin
d5dd34278b Fix delete permissions 2021-08-17 13:48:52 +02:00
Pierre Noël
dd0c095f1e Merge branch 'v4/backend' into pluginAPI/loadPlugin 2021-08-04 15:05:56 +02:00
Alexandre Bodin
d44a6f68ee Migrate admin to programmatic loading 2021-08-02 17:54:49 +02:00