Support argument authorization

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Our GraphQL schema does not support argument authorization.

This issue exists to document this limitation.

See https://gitlab.com/gitlab-org/gitlab/-/blob/455023-ai-features-token-for-ai-actions-graphql/app/graphql/types/base_field.rb#L51-L53 because we're overriding authorized? and not calling super which means we skip the argument authorization checks at https://github.com/rmosolgo/graphql-ruby/blob/ce5e26ae550782d9c0092958df9c21cb7a54379f/lib/graphql/schema/field.rb#L594