这是indexloc提供的服务,不要输入任何密码
Skip to content

Allow unauthorized role to access x-hasura- headers #1686

@mitchazj

Description

@mitchazj

This would allow the case where an anonymous user needs to be able to query a table for more information on a specific row, without having access to every row that they do not know about.

For example, if an anonymous user needs to access the primary key attached to their email address (perhaps to fetch other non-sensitive information connected in another table via key_relation to the primary key), they would pass their email address in the x-hasura-user-id header so that they can query-select their specific row without being able to query-select every row (including other users' emails) in the entire table.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions