Open dalanmiller opened 7 years ago
Just tested this, seems like we just need to add .find
to the implicit list.
The list wasn't intended to be exhaustive, it was just a bunch of example queries. But since it has caused confusion, we should probably add a find
query to it.
There are some cases where you'd want to only allow
.find
versus.findAll
in your queries. But in the example here:.find()
isn't included in the queries that no longer match the template. And here:.find()
isn't included in the queries that are implicitly allowed. So it's ultimately unclear whether or not.find()
is allowed or not. Was this just an accidental omission? Or was.find()
not included in the permissions templates and one should use.findAll
instead?Come across this from this question on SO.
@mlucy @Tryneus