Only admins are allowed to query all notifications

2025-12-13 07:45:56 +00:00 · 2019-04-05 02:23:27 +02:00 · 2019-04-05 02:23:27 +02:00 · bb3a8525db
commit bb3a8525db
parent 97d9b6d772
1 changed files with 1 additions and 0 deletions
--- a/backend/src/middleware/permissionsMiddleware.js
+++ b/backend/src/middleware/permissionsMiddleware.js
@ -44,6 +44,7 @@ const isAuthor = rule({ cache: 'no_cache' })(async (parent, args, { user, driver
 // Permissions
 const permissions = shield({
  Query: {
+    Notification: isAdmin,
    statistics: allow,
    currentUser: allow,
    Post: or(onlyEnabledContent, isModerator)