这是indexloc提供的服务,不要输入任何密码
Skip to content

Conversation

@rikinsk
Copy link
Member

@rikinsk rikinsk commented Feb 11, 2020

Description

Permission builer breaks when:

  • column name is manually edited to a non-existent value
  • _where / _table keys are changed under _exists operator
  • object is passed to _or/_and operators

Affected components

  • Server
  • Console
  • CLI
  • Docs
  • Community Content
  • Build System
  • Tests
  • Other (list it)

Related Issues

#3848

Solution and Design

Steps to test and verify

Limitations, known bugs & workarounds

@rikinsk rikinsk requested a review from beerose as a code owner February 11, 2020 14:05
@rikinsk rikinsk added c/console Related to console s/wip Status: This issue is a work in progress labels Feb 11, 2020
@rikinsk rikinsk changed the title handle invalid column names in permission builder handle invalid keywords in permission builder Feb 11, 2020
@hasura-bot
Copy link
Contributor

Review app for commit 8f96d19 deployed to Heroku: https://hge-ci-pull-3863.herokuapp.com
Docker image for server: hasura/graphql-engine:pull3863-8f96d19e

@rikinsk rikinsk removed the s/wip Status: This issue is a work in progress label Feb 11, 2020
@rikinsk rikinsk changed the title handle invalid keywords in permission builder handle invalid keys in permission builder Feb 11, 2020
@hasura-bot
Copy link
Contributor

Review app for commit 726c4e5 deployed to Heroku: https://hge-ci-pull-3863.herokuapp.com
Docker image for server: hasura/graphql-engine:pull3863-726c4e5e

@hasura-bot
Copy link
Contributor

Review app for commit cd1f38a deployed to Heroku: https://hge-ci-pull-3863.herokuapp.com
Docker image for server: hasura/graphql-engine:pull3863-cd1f38a0

@hasura-bot
Copy link
Contributor

Review app for commit 77c185f deployed to Heroku: https://hge-ci-pull-3863.herokuapp.com
Docker image for server: hasura/graphql-engine:pull3863-77c185fc

@rikinsk rikinsk merged commit 4b78884 into hasura:master Feb 12, 2020
@hasura-bot
Copy link
Contributor

Review app https://hge-ci-pull-3863.herokuapp.com is deleted

@rikinsk rikinsk deleted the console-fix-permissions branch February 12, 2020 09:15
rikinsk added a commit to rikinsk/graphql-engine that referenced this pull request Feb 19, 2020
…#3863)

* handle non-existent column names
* handle invalid _exist operator expression keys
* handle non-array values for _and/_or operators
shahidhk pushed a commit that referenced this pull request Feb 19, 2020
* handle invalid keys in permission builder (close #3848) (#3863)

* handle non-existent column names
* handle invalid _exist operator expression keys
* handle non-array values for _and/_or operators

* console: show pre-release update notifications with opt out option (#3888)
karthikvt26 pushed a commit to karthikvt26/graphql-engine that referenced this pull request Nov 17, 2020
* handle invalid keys in permission builder (close hasura#3848) (hasura#3863)

* handle non-existent column names
* handle invalid _exist operator expression keys
* handle non-array values for _and/_or operators

* console: show pre-release update notifications with opt out option (hasura#3888)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c/console Related to console

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants