mlipscombe / postgraphile-plugin-nested-mutations

Nested mutations for Postgraphile

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Breaks on tables with column-level permissions

ColonelPanic-42 opened this issue · comments

This plugin uses * to return all columns on selected/inserted/updated rows. When executed by an unprivileged user who only has permission to certain columns, this of course causes the request to fail as it tries to access inaccessible columns.

If possible, the query should be generated to only return the columns actually requested rather than using *.