go/pocketbase
1
0
Fork 0
mirror of https://github.com/pocketbase/pocketbase.git synced 2025-11-23 22:55:37 +02:00
Code Issues Releases Activity

set allowHiddenFields to prevent infinite recursion

Browse Source
This commit is contained in:
Gani Georgiev
2025-11-01 14:54:22 +02:00
parent 482fe2bce0
commit 153ad12e64
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
core/record_field_resolver.go
View File

@@ -267,16 +267,14 @@ func (r *RecordFieldResolver) registerJoin(tableName string, tableAlias string,
}
func (r *RecordFieldResolver) updateCollectionJoinWithListRuleSubquery(c *Collection, j *join) {
if c == nil {
if c == nil || r.allowHiddenFields {
return
}
// resolve to empty set for superusers only collections
// (treat all collection fields as "hidden")
if c.ListRule == nil {
if !r.allowHiddenFields {
j.on = dbx.NewExp("1=2")
}
j.on = dbx.NewExp("1=2")
return
}
@@ -295,6 +293,7 @@ func (r *RecordFieldResolver) updateCollectionJoinWithListRuleSubquery(c *Collec
cloneR := *r
cloneR.joins = []*join{}
cloneR.baseCollection = c
cloneR.allowHiddenFields = true
expr, err := search.FilterData(*c.ListRule).BuildExpr(&cloneR)
if err != nil {