[permisions] Bypass permission checks with api key (#10516)

Closes https://github.com/twentyhq/core-team-issues/issues/325
2025-02-28 07:50:49 +01:00
parent 0dc1cd9df1
commit a3a05c63f6
8 changed files with 103 additions and 54 deletions
--- a/packages/twenty-server/src/modules/workspace-member/query-hooks/workspace-member-pre-query-hook.service.ts
+++ b/packages/twenty-server/src/modules/workspace-member/query-hooks/workspace-member-pre-query-hook.service.ts
@ -66,6 +66,7 @@ export class WorkspaceMemberPreQueryHookService {
        userWorkspaceId,
        workspaceId,
        _setting: SettingsPermissions.WORKSPACE_MEMBERS,
+        isExecutedByApiKey: isDefined(apiKey),
      })
    ) {
      return;