hasura / hasura/graphql-engine
Customise error messages for insert permission violations
Open
a/authz
c/server
c/v3-engine
c/v3-ndc-postgres
k/ideas
p/medium
v3
- Dominant language
- TypeScript
- Stars
- 32.1k
- Forks
- 3k
- PR merge metrics
- PR metrics pending
Description
For every permission rule for insert, could we take a "error message" string from the developer?
This error message that can then show up in the "messages" key of the graphql error.
@paf31 Regarding the bit where we print the record in the error message (in the demo you showed) eg: `(23, phil, test5@hasura.io)`.
Is that record printing permission safe? Meaning, does it respect the select permission rules so that we don't leak more columns that we need to say?
Contributor guide
Assessment
This issue has not been assessed yet.