github/directus
1
1
Fork 0
mirror of https://github.com/directus/directus.git synced 2026-04-25 03:00:53 -04:00
Code Issues Packages Projects Releases Wiki Activity

prevent fields without permissions from appearing (#12949)

Browse Source
This commit is contained in:
Azri Kahar
2022-04-22 23:56:21 +08:00
committed by GitHub
parent 90b5883f49
commit 3965a5e6dd
1 changed files with 35 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
api/src/utils/reduce-schema.ts
View File

@@ -36,24 +36,46 @@ export function reduceSchema(
for (const [collectionName, collection] of Object.entries(schema.collections)) {
if (
permissions?.some((permission) => permission.collection === collectionName && actions.includes(permission.action))
!permissions?.some(
(permission) => permission.collection === collectionName && actions.includes(permission.action)
)
) {
const fields: SchemaOverview['collections'][string]['fields'] = {};
continue;
}
for (const [fieldName, field] of Object.entries(schema.collections[collectionName].fields)) {
if (
allowedFieldsInCollection[collectionName]?.includes('*') ||
allowedFieldsInCollection[collectionName]?.includes(fieldName)
) {
fields[fieldName] = field;
}
const fields: SchemaOverview['collections'][string]['fields'] = {};
for (const [fieldName, field] of Object.entries(schema.collections[collectionName].fields)) {
if (
!allowedFieldsInCollection[collectionName]?.includes('*') &&
!allowedFieldsInCollection[collectionName]?.includes(fieldName)
) {
continue;
}
reduced.collections[collectionName] = {
...collection,
fields,
};
const relatedCollection: string | undefined =
schema.relations.find((relation) => relation.collection === collectionName && relation.field === fieldName)
?.related_collection ||
schema.relations.find(
(relation) => relation.related_collection === collectionName && relation.meta?.one_field === fieldName
)?.collection;
if (
relatedCollection &&
!permissions?.some(
(permission) => permission.collection === relatedCollection && actions.includes(permission.action)
)
) {
continue;
}
fields[fieldName] = field;
}
reduced.collections[collectionName] = {
...collection,
fields,
};
}
reduced.relations = schema.relations.filter((relation) => {