github/directus
1
0
Fork 0
mirror of https://github.com/directus/directus.git synced 2026-01-24 02:27:56 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix type check

Browse Source
This commit is contained in:
rijkvanzanten
2020-10-08 14:10:00 -04:00
parent 34323d48fc
commit 2e6b295ee4
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
api/src/services/authorization.ts
View File

@@ -105,15 +105,15 @@ export class AuthorizationService {
const allowedFields = permissions.fields?.split(',') || [];
for (const childAST of ast.children) {
if (childAST.type !== 'field') {
validateFields(childAST);
for (const childNode of ast.children) {
if (childNode.type !== 'field') {
validateFields(childNode);
continue;
}
if (allowedFields.includes('*')) continue;
const fieldKey = childAST.name;
const fieldKey = childNode.name;
if (allowedFields.includes(fieldKey) === false) {
throw new ForbiddenException(