diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-06-27 00:40:49 +0300 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-06-27 00:40:49 +0300 |
| commit | 0279476e55b16bc43c9bce0c45831570c9e1d51f (patch) | |
| tree | 4361a111fd7e5a6062840d3ab8d372ca920b9fd9 /lib | |
| parent | a77190620307068efa7bd714a4f2eadbdeb19d1e (diff) | |
| parent | 2e1428da98f1b0f1f3ec6bebe6fba1c8b5d86002 (diff) | |
Merge branch 'security-bvl-enforce-graphql-type-authorization-12-0' into '12-0-stable'
Fix type authorizations in GraphQL
See merge request gitlab/gitlabhq!3172
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/gitlab/graphql/authorize/authorize_field_service.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/gitlab/graphql/authorize/authorize_field_service.rb b/lib/gitlab/graphql/authorize/authorize_field_service.rb index 619ce100421..3b5dde2fde5 100644 --- a/lib/gitlab/graphql/authorize/authorize_field_service.rb +++ b/lib/gitlab/graphql/authorize/authorize_field_service.rb @@ -39,6 +39,8 @@ module Gitlab type = node_type_for_basic_connection(type) end + type = type.unwrap if type.kind.non_null? + Array.wrap(type.metadata[:authorize]) end |