(hotfix) Reducing restriction to access getClubs (#60)

bde-isima · Nov 4, 2024 · f44ba08 · f44ba08
1 parent 95f7a3f
commit f44ba08
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/app/entities/clubs/queries/README.md b/app/entities/clubs/queries/README.md
@@ -2,4 +2,9 @@
 
 # getClubs
 
-- Can be performed by any user
+- Can be performed by any registered user
+
+# getPublicClubs
+
+- Can be performed by any user and guest
+- Restrict shown clubs and available operation to the data
diff --git a/app/entities/clubs/queries/getClubs.ts b/app/entities/clubs/queries/getClubs.ts
@@ -5,7 +5,7 @@ import { resolver } from '@blitzjs/rpc';
 type GetClubsInput = Pick<Prisma.ClubFindManyArgs, 'where' | 'orderBy' | 'skip' | 'take'>;
 
 export default resolver.pipe(
-  resolver.authorize(['*', 'bde']),
+  resolver.authorize(),
   async ({ where, orderBy, skip = 0, take }: GetClubsInput, _ctx) => {
     const clubs = await db.club.findMany({
       where,