We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 97e143a commit fdd9270Copy full SHA for fdd9270
src/rest.js
@@ -62,7 +62,10 @@ async function runFindTriggers(
62
const ids = (Array.isArray(objectsFromBeforeFind) ? objectsFromBeforeFind : [objectsFromBeforeFind])
63
.map(o => (o && (o.id || o.objectId)) || null)
64
.filter(Boolean);
65
-
+
66
+ // Objects without IDs are(normally) unsaved objects
67
+ // For unsaved objects, the ACL security does not apply, so no need to redo the query.
68
+ // For saved objects, we need to re-query to ensure proper ACL/CLP enforcement
69
if (ids.length > 0) {
70
const refilterWhere = isGet ? { objectId: ids[0] } : { objectId: { $in: ids } };
71
0 commit comments