Potential security vulnerability with computed fields on v1.3
209 views
Skip to first unread message
Shahidh K Muhammed
unread,
Sep 7, 2020, 2:34:28 PM9/7/20
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Hasura Security Announcements
Hello all,
We recommend that you upgrade to v1.3.2if you’re using v1.3. We’ve fixed an issue (#5696) where the column masking in select permissions were not applied for scalar computed fields. This issue affects you only if you’re usingscalar valued computed fieldsand if you’re not using allow-lists.