Hi All, I am able to upload files without authentication even though my permissions for file node creation has authenticated set. Is this a bug?

Hi @m.b.iqbal - currently files are not covered by the permission system. So this is a known limitation.

Thanks for the reply @sorenbs This guide states that it does https://www.graph.cool/docs/reference/platform/file-management-eer4wiang0/

the wording is a bit unfortunate, I'll get that sorted right away. But with the permission system, you're able to allow or forbid to query the file secret using

allFiles

for example. Uploading/downloading of files is not affected by the permission system as of now.

Thanks. That clears it up.

thanks for bringing that up 🙂

No problem 🙂