ErnestDaDev
commented
1 year ago So i fugured out, the unathourized on owner was referring to the owner field on the schema - owner: String @auth(rules: [{ allow: owner, operations: [create, read] }])
so after i changed it to owner: String @auth(rules: [{ allow: owner, operations: [create, read, update, delete] }])
it works now. So the question actually is how do i get the owner to update or delete a record without touching the owner field, initially i knew AWS Amplify did not allow us to touch the field if not explicitly stated in the @auth
In the docs, it says To prevent an owner from reassigning their record to another user, protect the owner field (by default owner: String) with a field-level authorization rule. For example, in a social media app, you would want to prevent Alice from being able to reassign Alice's Post to Bob.
type Todo @model @auth(rules: [{ allow: owner }]) { id: ID! description: String owner: String @auth(rules: [{ allow: owner, operations: [read, delete] }]) }
So the question actually is how do i get the owner to update or delete a record without touching the owner field on server side?
mlaube
HuiSF
Jordan-Nelson
Description
In my schema i have @auth with owner with full operations - CRUD, in the app, syncing is done perfectly, it can create and read but it immediately says unauthorized when i attempt to both update or delete the record when it tries to sync, it gets deleted locally but it never makes it to the cloud. I tried with the API directly as you can see in the screenshot and it gives the error unauthorized. Am i doing something wrong somewhere? It just seems strange that i can create and read but explicitly prevents deletion and updating even when i have the permissions. Its been 5 days now of trying still no solution. As you can see attached when i print out the -acm, it confirms owner can perform CRUD. @HuiSF What do you think might be the issue here? Thanks in advance.
Here is the schema.
Categories
Steps to Reproduce
No response
Screenshots
Platforms
Android Device/Emulator API Level
API 24, API 32+
Environment
Dependencies
Device
NA
OS
Android 10
Deployment Method
Amplify CLI
CLI Version
10.2.2
Additional Context
No response
Amplify Config
{ "UserAgent": "aws-amplify-cli/2.0", "Version": "1.0", "api": { "plugins": { "awsAPIPlugin": { "app": { "endpointType": "GraphQL", "endpoint": "hidden", "region": "eu-west-2", "authorizationType": "AMAZON_COGNITO_USER_POOLS", "apiKey": hiddeni" } } } }, "auth": { "plugins": { "awsCognitoAuthPlugin": { "UserAgent": "aws-amplify-cli/0.1.0", "Version": "0.1.0", "IdentityManager": { "Default": {} }, "CredentialsProvider": { "CognitoIdentity": { "Default": { "PoolId": "hidden", "Region": "eu-west-2" } } }, "CognitoUserPool": { "Default": { "PoolId": "hidden", "AppClientId": "hidden", "Region": "eu-west-2" } }, "Auth": { "Default": { "authenticationFlowType": "USER_SRP_AUTH", "socialProviders": [], "usernameAttributes": [ "PHONE_NUMBER" ], "signupAttributes": [ "EMAIL" ], "passwordProtectionSettings": { "passwordPolicyMinLength": 8, "passwordPolicyCharacters": [] }, "mfaConfiguration": "OFF", "mfaTypes": [ "SMS" ], "verificationMechanisms": [ "PHONE_NUMBER" ] } }, "AppSync": { "Default": { "ApiUrl": "hidden", "Region": "eu-west-2", "AuthMode": "AMAZON_COGNITO_USER_POOLS", "ClientDatabasePrefix": "app_AMAZON_COGNITO_USER_POOLS" }, "app_API_KEY": { "ApiUrl": "hidden", "Region": "eu-west-2", "AuthMode": "API_KEY", "ApiKey": "hidden", "ClientDatabasePrefix": "app_API_KEY" }, "app_AWS_IAM": { "ApiUrl": "hidden", "Region": "eu-west-2", "AuthMode": "AWS_IAM", "ClientDatabasePrefix": "app_AWS_IAM" } } } } } }