Skip to content

Allow GraphQL Scalar-fields to be authorized

What does this MR do?

We now allow GraphQL Scalar fields (e.g., ones that return Strings, or Integers) to have authorization applied to them, such as

module Types
  class ExampleType < BaseObject
    graphql_name 'Example'

    expose_permissions Types::PermissionTypes::Example

    field :id, GraphQL::ID_TYPE, null: false
    field :path, GraphQL::STRING_TYPE, null: false, authorize: :admin_example
  end
end

What are the relevant issue numbers?

Closes #57831 (closed)

Does this MR meet the acceptance criteria?

Edited by Brett Walker

Merge request reports