postgraphile-plugin-nested-mutations
postgraphile-plugin-nested-mutations copied to clipboard
Breaks on tables with column-level permissions
This plugin uses * to return all columns on selected/inserted/updated rows. When executed by an unprivileged user who only has permission to certain columns, this of course causes the request to fail as it tries to access inaccessible columns.
If possible, the query should be generated to only return the columns actually requested rather than using *.