fix(groups): fix unauthenticated access to groups because of missing read:group:members permission

The permission in question is now removed

Closes #1311

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
This commit is contained in:
Thomas Citharel
2023-06-21 17:47:10 +02:00
parent 93f175da2c
commit 3714925896
5 changed files with 4 additions and 12 deletions

View File

@@ -125,7 +125,7 @@ defmodule Mobilizon.GraphQL.Schema.Actors.GroupType do
description: "Whether the group is opened to all or has restricted access"
)
field :members, :paginated_member_list, meta: [private: true, rule: :"read:group:members"] do
field :members, :paginated_member_list do
arg(:name, :string, description: "A name to filter members by")
arg(:page, :integer, default_value: 1, description: "The page in the paginated member list")
arg(:limit, :integer, default_value: 10, description: "The limit of members per page")