feat(authorization): add read execution checks

2023-06-23 20:57:08 +00:00
parent 5d77f64e76
commit 8a71c13078
3 changed files with 6 additions and 0 deletions
--- a/packages/backend/src/graphql/queries/get-executions.ts
+++ b/packages/backend/src/graphql/queries/get-executions.ts
@@ -12,6 +12,8 @@ const getExecutions = async (
  params: Params,
  context: Context
 ) => {
+  context.currentUser.can('read', 'Execution');
+
  const selectStatusStatement = `
    case
      when count(*) filter (where execution_steps.status = 'failure') > 0