Permissions are not checked

br41nslug / directus-websocket-subscribe

An extension to subscribe to directus updates over a websocket.

MIT License

106 stars 13 forks source link

Closed Nisthar closed 2 years ago

Nisthar commented 2 years ago

i am sending the authorization token via query param The read permission on my notifications collection is set to $CURRENT_USER

so only notifications sent to the user can read it.

But currently the websocket is receiving events for all the notifications after subscribing.

Nisthar commented 2 years ago

wow nice job

Nisthar commented 2 years ago

I can confirm its working now