From 8f6555250b3fcf5b4b68532fdc7b4f4277809091 Mon Sep 17 00:00:00 2001 From: Ulf Gebhardt Date: Sun, 6 Apr 2025 03:55:31 +0200 Subject: [PATCH] use permission middleware --- backend/src/middleware/permissionsMiddleware.ts | 1 + backend/src/schema/resolvers/users.ts | 6 ------ 2 files changed, 1 insertion(+), 6 deletions(-) diff --git a/backend/src/middleware/permissionsMiddleware.ts b/backend/src/middleware/permissionsMiddleware.ts index a38610efd..08042cb2a 100644 --- a/backend/src/middleware/permissionsMiddleware.ts +++ b/backend/src/middleware/permissionsMiddleware.ts @@ -470,6 +470,7 @@ export default shield( }, User: { email: or(isMyOwn, isAdmin), + emailNotificationSettings: isMyOwn, }, Report: isModerator, }, diff --git a/backend/src/schema/resolvers/users.ts b/backend/src/schema/resolvers/users.ts index 294ee81c1..2d8cec613 100644 --- a/backend/src/schema/resolvers/users.ts +++ b/backend/src/schema/resolvers/users.ts @@ -382,12 +382,6 @@ export default { return email }, emailNotificationSettings: async (parent, params, context, resolveInfo) => { - const { user } = context - if (user.id !== parent.id) { - // Its not the own user - return [] - } - return [ { type: 'post',