fix: Grant access to users table

theopensystemslab · Sep 20, 2023 · 61f1f3b · 61f1f3b
1 parent f721407
commit 61f1f3b
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/hasura.planx.uk/metadata/tables.yaml b/hasura.planx.uk/metadata/tables.yaml
@@ -1088,6 +1088,13 @@
     - role: teamEditor
       permission:
         columns:
+          - created_at
+          - email
           - first_name
+          - id
+          - is_platform_admin
           - last_name
-        filter: {}
+          - updated_at
+        filter:
+          id:
+            _eq: x-hasura-user-id
diff --git a/hasura.planx.uk/tests/users.test.js b/hasura.planx.uk/tests/users.test.js
@@ -50,6 +50,8 @@ describe("users", () => {
       i = await introspectAs("teamEditor");
     });
 
+    // Row-level permissions tested in e2e/tests/api-driven
+    // teamEditors can only query their own record
     test("can query users", async () => {
       expect(i.queries).toContain("users");
     });