feat(authorization): add read flow checks

2023-06-23 20:34:19 +00:00
parent 69582ff83d
commit 0d092b977f
1 changed files with 2 additions and 0 deletions
--- a/packages/backend/src/graphql/queries/get-flow.ts
+++ b/packages/backend/src/graphql/queries/get-flow.ts
@@ -5,6 +5,8 @@ type Params = {
 };

 const getFlow = async (_parent: unknown, params: Params, context: Context) => {
+  context.currentUser.can('read', 'Flow');
+
  const flow = await context.currentUser
    .$relatedQuery('flows')
    .withGraphJoined('[steps.[connection]]')