From 3912515c2580e5b82cfbcb38d954be4b34bde0bd Mon Sep 17 00:00:00 2001 From: Grzegorz Leoniec Date: Thu, 22 Nov 2018 12:22:22 +0100 Subject: [PATCH] do not allow disabling permissions in production --- src/middleware/index.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/middleware/index.js b/src/middleware/index.js index f3b036d63..4d3b5f72f 100644 --- a/src/middleware/index.js +++ b/src/middleware/index.js @@ -19,7 +19,8 @@ export default schema => { ] // add permisions middleware if we are not seeding to the first position - if (process.env.PERMISSIONS !== 'disabled') { + // NOTE: DO NOT SET THE PERMISSION FLAT YOUR SELF + if (process.env.PERMISSIONS !== 'disabled' && process.env.NODE_ENV !== 'production') { middleware.unshift(permissionsMiddleware.generate(schema)) } return middleware