Open Source Low-code API development framework Featuring ready-to-go Security and MongoDB API
GNU Affero General Public License v3.0
792
stars
170
forks
source link
Error on PATCH request using update operator expression when permission with mongo.mergeRequest applies #503
Open
ujibang opened 4 months ago
Describe the bug
PATCH requests allows the body to be an update operator expression or update aggregation pipeline. See https://restheart.org/docs/mongodb-rest/write-docs#mongodb-write-operations
When the request with operator expression is authorized by a permission specifying
mongo.mergeRequest
, the request fails.To Reproduce
create test user and permission
now try a PATCH on
/test/doc
with update operator expression; the request fails