Permission engine is resolving other nodes #4644
Labels
group/backend
Issue related to the backend (API Server, Git Agent)
state/planned
This issue is planned to be worked on in an upcoming release.
Milestone
If a user has a permission to allow everything only on 1 node (for example the tag), when requesting the object details with the source of the description, there is a permission error mentionning the IPPrefixPool
Permissions: {{object:main:Builtin:Tag:ayn:allow}}
Query:
{noformat}query BuiltinTag {
BuiltinTag(ids: ["17fd0f03-84f4-4a6f-3674-c512a4a0503c"]) {
edges {
node {
id
description {
source {
id
}
}
}
}
}
}{noformat}
Response:
{noformat}{
"data": null,
"errors": [
{
"message": "You do not have the following permission: object:main:Core:IPPrefixPool:view:allow",
"extensions": {
"code": 403
}
}
]
}{noformat}
The text was updated successfully, but these errors were encountered: