Only add update_me permissions for logged in users (#12685)

Fixes #12256
This commit is contained in:
Rijk van Zanten
2022-04-11 15:39:21 -04:00
committed by GitHub
parent 56963faca9
commit 49f97dfdd4

View File

@@ -2492,7 +2492,7 @@ export class GraphQLService {
});
}
if ('directus_users' in schema.update.collections) {
if ('directus_users' in schema.update.collections && this.accountability?.user) {
schemaComposer.Mutation.addFields({
update_users_me: {
type: ReadCollectionTypes['directus_users'],