diff options
author | Bob Van Landuyt <bob@vanlanduyt.co> | 2019-06-18 19:31:06 +0300 |
---|---|---|
committer | Bob Van Landuyt <bob@vanlanduyt.co> | 2019-06-20 17:58:18 +0300 |
commit | 2e1428da98f1b0f1f3ec6bebe6fba1c8b5d86002 (patch) | |
tree | b7187122de73fc447144b8915bd3980cf18a01a4 /changelogs | |
parent | 867590945742ec0325b4e27d6523e004695e1405 (diff) |
Fix failing auhtorizations in GraphQL
0. Add authorize to LabelType and NamespaceType.
1. Make sure that authorizations on non-nullable fields are also
executed.
Diffstat (limited to 'changelogs')
-rw-r--r-- | changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml b/changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml new file mode 100644 index 00000000000..7dedb9f6230 --- /dev/null +++ b/changelogs/unreleased/security-bvl-enforce-graphql-type-authorization.yml @@ -0,0 +1,5 @@ +--- +title: Add missing authorizations in GraphQL +merge_request: +author: +type: security |