mirror of
https://github.com/directus/directus.git
synced 2026-04-25 03:00:53 -04:00
prevent ambiguous role selection in middleware (#8334)
This commit is contained in:
@@ -39,7 +39,7 @@ const authenticate: RequestHandler = asyncHandler(async (req, res, next) => {
|
||||
}
|
||||
|
||||
const user = await database
|
||||
.select('role', 'directus_roles.admin_access', 'directus_roles.app_access')
|
||||
.select('directus_users.role', 'directus_roles.admin_access', 'directus_roles.app_access')
|
||||
.from('directus_users')
|
||||
.leftJoin('directus_roles', 'directus_users.role', 'directus_roles.id')
|
||||
.where({
|
||||
|
||||
Reference in New Issue
Block a user