New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
using $or in ?s ignores auth filter #815
Comments
I'm using 4.6.2 and postgres and cannot replicate this. Commenting and subscribing for when the minimal repo is up! |
@imnotjames Sorry, completely forgot about it, I added it now. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Bug Report
Current behavior
When I use the following search query, I receive results from all userId's, despite setting a filter for userId:
for your convenience, a Curl:
Input Code
Controller:
UserTip Entity:
Tip entity:
The generated SQL:
Expected behavior
I would expect to only receive entities with the specified userId. (WHERE ("UserTip"."userId" = $1 AND ("tip"."type" = $3 OR "tip"."type" = $4))
Possible Solution
Environment
Repository with minimal reproduction
repo
The text was updated successfully, but these errors were encountered: