consul/nairobi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Skip authorization check in GraphQL controller

Browse Source
This commit is contained in:
Alberto Miedes Garcés
2016-10-12 17:28:01 +02:00
parent 56c4dbc2f4
commit dc62f6c914
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/controllers/graphql_controller.rb
View File

@@ -1,8 +1,6 @@
class GraphqlController < ApplicationController class GraphqlController < ApplicationController
# (!!) Está autorizando todos los resources, no sólo Proposal ¿por qué? skip_authorization_check
# (!!) Nos da acceso a recursos a los que se supone que no tenemos acceso, cómo 'Geozones', ¿por qué?
authorize_resource :proposal
def query def query
render json: ConsulSchema.execute( render json: ConsulSchema.execute(