Skip to content

Conversation

@fanatic75
Copy link
Contributor

This PR fixes the edge case of comparing nested doc ID only if the nested level is less than MAX DEPTH allowed.

@fanatic75 fanatic75 requested a review from abnegate August 11, 2023 12:01
@fanatic75 fanatic75 requested a review from abnegate August 11, 2023 16:31
@fanatic75 fanatic75 requested a review from abnegate August 14, 2023 05:26
Comment on lines +3397 to +3402
static::getDatabase()->updateCollection('level3', [
Permission::read(Role::any()),
Permission::create(Role::any()),
Permission::update(Role::any()),
Permission::delete(Role::any()),
], false);
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You shouldn't be able to do this without update permission unless using Auth::skip 🤔 I'll address in a separate PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants