github/directus
1
0
Fork 0
mirror of https://github.com/directus/directus.git synced 2026-01-28 18:38:10 -05:00
Code Issues Packages Projects Releases Wiki Activity

check system deny list in relations for GraphQL (#10674)

Browse Source
This commit is contained in:
Azri Kahar
2021-12-25 02:21:49 +08:00
committed by GitHub
parent 074a252b65
commit 15ffe6bd3f
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
api/src/services/graphql.ts
View File

@@ -467,6 +467,8 @@ export class GraphQLService {
for (const relation of schema[action].relations) {
if (relation.related_collection) {
if (SYSTEM_DENY_LIST.includes(relation.related_collection)) continue;
CollectionTypes[relation.collection]?.addFields({
[relation.field]: {
type: CollectionTypes[relation.related_collection],
@@ -931,6 +933,8 @@ export class GraphQLService {
for (const relation of schema.read.relations) {
if (relation.related_collection) {
if (SYSTEM_DENY_LIST.includes(relation.related_collection)) continue;
ReadableCollectionFilterTypes[relation.collection]?.addFields({
[relation.field]: ReadableCollectionFilterTypes[relation.related_collection],
});