fix: site settings must be accessible by non-logged-in users (#481)

webiny · Mar 17, 2019 · 780cd7b · 780cd7b
1 parent 8889a28
commit 780cd7b
Show file tree

Hide file tree

Showing 5 changed files with 2 additions and 11 deletions.
diff --git a/independent/webiny-integration-google-tag-manager/src/plugins/api/index.js b/independent/webiny-integration-google-tag-manager/src/plugins/api/index.js
@@ -19,9 +19,6 @@ export default [
         resolvers: {},
         security: {
             shield: {
-                SettingsQuery: {
-                    googleTagManager: hasScope("cms:settings")
-                },
                 SettingsMutation: {
                     googleTagManager: hasScope("cms:settings")
                 }

diff --git a/independent/webiny-integration-mailchimp/src/plugins/api/index.js b/independent/webiny-integration-mailchimp/src/plugins/api/index.js
@@ -102,9 +102,6 @@ export default [
                 },
                 MailchimpQuery: {
                     listLists: hasScope("cms:editor")
-                },
-                MailchimpMutation: {
-                    addToList: hasScope("cms:editor")
                 }
             }
         },

diff --git a/packages/demo-api/src/configs/development.js b/packages/demo-api/src/configs/development.js
@@ -39,7 +39,7 @@ export default async () => {
             }
         },
         security: {
-            enabled: false,
+            enabled: true,
             token: {
                 secret: process.env.WEBINY_JWT_SECRET,
                 expiresOn: () => addDays(new Date(), 30)

diff --git a/packages/demo-api/src/configs/production.js b/packages/demo-api/src/configs/production.js
@@ -21,7 +21,7 @@ export default async (context: Object) => {
             }
         },
         security: {
-            enabled: false,
+            enabled: true,
             token: {
                 secret: context.jwtSecret,
                 expiresOn: () => addDays(new Date(), 30)

diff --git a/packages/webiny-api-cms/src/plugins/graphql.js b/packages/webiny-api-cms/src/plugins/graphql.js
@@ -79,9 +79,6 @@ export default {
                 updateElement: hasScope("cms:element:crud"),
                 deleteElement: hasScope("cms:element:crud")
             },
-            SettingsQuery: {
-                cms: hasScope("cms:settings")
-            },
             SettingsMutation: {
                 cms: hasScope("cms:settings")
             }