mirror of
https://github.com/directus/directus.git
synced 2026-04-25 03:00:53 -04:00
Only add update_me permissions for logged in users (#12685)
Fixes #12256
This commit is contained in:
@@ -2492,7 +2492,7 @@ export class GraphQLService {
|
||||
});
|
||||
}
|
||||
|
||||
if ('directus_users' in schema.update.collections) {
|
||||
if ('directus_users' in schema.update.collections && this.accountability?.user) {
|
||||
schemaComposer.Mutation.addFields({
|
||||
update_users_me: {
|
||||
type: ReadCollectionTypes['directus_users'],
|
||||
|
||||
Reference in New Issue
Block a user