Join Slack
Powered by
In the permissions example, how do you prevent a u...
# prisma-whats-new
t
timwis
10/28/2017, 7:25 PM
In the permissions example, how do you prevent a user creating a post on behalf of a different user?
https://github.com/graphcool/framework/blob/master/examples/permissions/graphcool.yml#L13
timwis
10/28/2017, 7:26 PM
Ah, must be the connect permission
https://github.com/graphcool/framework/blob/master/examples/permissions/graphcool.yml#L67
timwis
10/28/2017, 7:30 PM
Actually, no, all that seems to do is make sure the user is logged in.. not verify that they are the user they’re associating with the
Post
record..
timwis
10/28/2017, 7:49 PM
Reported the issue
3
Views
Open in Slack
Previous
Next