From aa870b5020a0c625d34b3d1522cacbc8aaebc454 Mon Sep 17 00:00:00 2001
From: Moriz Wahl <moriz.wahl@gmx.de>
Date: Wed, 5 Oct 2022 08:57:13 +0200
Subject: [PATCH] searches need authorization as they are not working without
 user id in context

---
 backend/src/middleware/permissionsMiddleware.js | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/backend/src/middleware/permissionsMiddleware.js b/backend/src/middleware/permissionsMiddleware.js
index d77363c29..96bffbedb 100644
--- a/backend/src/middleware/permissionsMiddleware.js
+++ b/backend/src/middleware/permissionsMiddleware.js
@@ -299,10 +299,10 @@ export default shield(
   {
     Query: {
       '*': deny,
-      searchResults: allow,
-      searchPosts: allow,
-      searchUsers: allow,
-      searchHashtags: allow,
+      searchResults: isAuthenticated,
+      searchPosts: isAuthenticated,
+      searchUsers: isAuthenticated,
+      searchHashtags: isAuthenticated,
       embed: allow,
       Category: allow,
       Tag: allow,