feat(authorization): add update flow checks

2023-06-23 20:41:57 +00:00
parent 0d092b977f
commit 5d77f64e76
8 changed files with 16 additions and 0 deletions
--- a/packages/backend/src/graphql/queries/get-dynamic-data.ts
+++ b/packages/backend/src/graphql/queries/get-dynamic-data.ts
@@ -16,6 +16,8 @@ const getDynamicData = async (
  params: Params,
  context: Context
 ) => {
+  context.currentUser.can('update', 'Flow');
+
  const step = await context.currentUser
    .$relatedQuery('steps')
    .withGraphFetched({
--- a/packages/backend/src/graphql/queries/get-dynamic-fields.ts
+++ b/packages/backend/src/graphql/queries/get-dynamic-fields.ts
@@ -14,6 +14,8 @@ const getDynamicFields = async (
  params: Params,
  context: Context
 ) => {
+  context.currentUser.can('update', 'Flow');
+
  const step = await context.currentUser
    .$relatedQuery('steps')
    .withGraphFetched({
--- a/packages/backend/src/graphql/queries/get-step-with-test-executions.ts
+++ b/packages/backend/src/graphql/queries/get-step-with-test-executions.ts
@@ -11,6 +11,8 @@ const getStepWithTestExecutions = async (
  params: Params,
  context: Context
 ) => {
+  context.currentUser.can('update', 'Flow');
+
  const step = await context.currentUser
    .$relatedQuery('steps')
    .findOne({ 'steps.id': params.stepId })