diff options
| author | Marin Jankovski <marin@gitlab.com> | 2019-07-02 09:22:09 +0300 |
|---|---|---|
| committer | Marin Jankovski <marin@gitlab.com> | 2019-07-02 09:22:09 +0300 |
| commit | 7eae0e9b529c5fb28b30857c06cd004dc5ebd74e (patch) | |
| tree | 8f8193f5eeb2fb6ebf37278a881cf23e5086ef4f /lib | |
| parent | f66169b35c29294ecc9f63eeeedc52085d2a3fd7 (diff) | |
| parent | 967cbd083492f72ef59ddc9a98d7f67a7fe85d21 (diff) | |
Merge branch 'security-bvl-enforce-graphql-type-authorization' into 'master'
Fix type authorizations in GraphQL
See merge request gitlab/gitlabhq!3170
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/gitlab/graphql/authorize/authorize_field_service.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/gitlab/graphql/authorize/authorize_field_service.rb b/lib/gitlab/graphql/authorize/authorize_field_service.rb index 619ce100421..3b5dde2fde5 100644 --- a/lib/gitlab/graphql/authorize/authorize_field_service.rb +++ b/lib/gitlab/graphql/authorize/authorize_field_service.rb @@ -39,6 +39,8 @@ module Gitlab type = node_type_for_basic_connection(type) end + type = type.unwrap if type.kind.non_null? + Array.wrap(type.metadata[:authorize]) end |