search

tirumaraiselvan / graphql-engine

Blazing fast, instant realtime GraphQL APIs on Postgres with fine grained access control
https://hasura.io
Apache License 2.0
2 stars 0 forks source link

What if there is no select permission for the hasura column used in defining remote relationshp? #58

Open nizar-m opened 5 years ago

nizar-m commented 5 years ago

Let us say in profiles table, role user does not have select permission on column id. But id column is also used in defining a remote relationship user_remote. Currently the following query

{
  profiles {
    user_remote {
      username
    }
  }
}

gives error 

errors:
- extensions:
    path: "$.selectionSet.profiles_by_pk"
    code: unexpected
  message: could not lookup "id" in 'profiles'
MarcelloTheArcane commented 4 years ago

I'm not sure if this makes sense, but if the user has select permissions for user_remote, they should have id permissions too?