1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
const { forwardTo } = require('prisma-binding');
const { hasPermission } = require('../utils');
const Query = {
items: forwardTo('db'),
item: forwardTo('db'),
itemsConnection: forwardTo('db'),
me(parent, args, ctx, info) {
// check if there is a current user ID
if (!ctx.request.userId) {
return null;
}
return ctx.db.query.user(
{
where: { id: ctx.request.userId },
},
info
);
},
async users(parent, args, ctx, info) {
// 1. Check if they are logged in
if (!ctx.request.userId) {
throw new Error('You must be logged in!');
}
console.log(ctx.request.userId);
// 2. Check if the user has the permissions to query all the users
hasPermission(ctx.request.user, ['ADMIN', 'PERMISSIONUPDATE']);
// 2. if they do, query all the users!
return ctx.db.query.users({}, info);
},
};
module.exports = Query;
|
