alkem-io / server

Core server in the Alkemio platform, offering a GraphQL api for interacting with the logical domain model.
http://alkem.io
European Union Public License 1.2
24 stars 4 forks source link

BUG: Content visible #4524

Open larssondenise opened 1 week ago

larssondenise commented 1 week ago

Describe the bug In the search results, I see content (posts) from a subspace in a private Space I also see Subspaces that are part of a private Space

To Reproduce Steps to reproduce the behavior:

  1. search for offsite (when you are not a member of the Building the A-team space)
  2. See offsite subspace in a private space

or search for content

Expected behavior I can't see any content from private spaces (subspaces, posts, etc.)

Screenshots

techsmyth commented 1 day ago

@valentinyanakiev @hero101 there needs to be an authorization check for READ access on this result type.