gitlab-org--gitlab-foss/changelogs/unreleased/security-bvl-enforce-graphq...

---
title: Add missing authorizations in GraphQL
merge_request:
author:
type: security
Enforce authorizations for non-nullable fields This makes sure we also enforce authorizations for non-nullable fields. We are defining our authorizations on the unwrapped types (Repository). But when a type like that is presented in a non-nullable field, it's type is different (Repository!). The non-nullable type would not have the authorization metadata. This makes sure we check the metadata on the unwrapped type for finding authorizations. 2019-06-18 16:33:47 +00:00			`---`
			`title: Add missing authorizations in GraphQL`
			`merge_request:`
			`author:`
			`type: security`