Fix permissions
This commit is contained in:
@ -38,10 +38,11 @@ export class UserResolver {
|
||||
): Promise<Partial<User>[]> {
|
||||
return await this.userService.findMany({
|
||||
...args,
|
||||
where: {
|
||||
...args.where,
|
||||
AND: [accessibleBy(ability).User],
|
||||
},
|
||||
where: args.where
|
||||
? {
|
||||
AND: [args.where, accessibleBy(ability).User],
|
||||
}
|
||||
: accessibleBy(ability).User,
|
||||
select: prismaSelect.value,
|
||||
});
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user