Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Force arrays for relation permissions checks

Browse Source
This commit is contained in:
Jake Barnby
2023-03-29 14:33:53 +13:00
parent e80d13076f
commit ecaca00463
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/controllers/api/databases.php
+9
View File
@@ -2658,6 +2658,9 @@ App::post('/v1/databases/:databaseId/collections/:collectionId/documents')
if (empty($related)) {
continue;
}
if (!\is_array($related)) {
$related = [$related];
}
$relatedCollectionId = $relationship->getAttribute('relatedCollection');
$relatedCollection = Authorization::skip(
@@ -3210,6 +3213,9 @@ App::patch('/v1/databases/:databaseId/collections/:collectionId/documents/:docum
if (empty($related)) {
continue;
}
if (!\is_array($related)) {
$related = [$related];
}
$relatedCollectionId = $relationship->getAttribute('relatedCollection');
$relatedCollection = Authorization::skip(
@@ -3369,6 +3375,9 @@ App::delete('/v1/databases/:databaseId/collections/:collectionId/documents/:docu
if (empty($related)) {
continue;
}
if (!\is_array($related)) {
$related = [$related];
}
$relatedCollectionId = $relationship->getAttribute('relatedCollection');
$relatedCollection = Authorization::skip(