fix(groups): fix unauthenticated access to groups because of missing read:group:members permission

The permission in question is now removed Closes #1311 Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2023-06-21 17:47:10 +02:00
parent 93f175da2c
commit 3714925896
5 changed files with 4 additions and 12 deletions
--- a/lib/graphql/authorization/app_scope.ex
+++ b/lib/graphql/authorization/app_scope.ex
@@ -67,7 +67,6 @@ defmodule Mobilizon.GraphQL.Authorization.AppScope do
      :"read:group:events",
      :"read:group:discussions",
      :"read:group:resources",
-      :"read:group:members",
      :"read:group:followers",
      :"read:group:todo_lists",
      :"read:group:activities"