Correct GQL Authorize policies

tgstation · Sep 24, 2024 · e14d998 · e14d998
1 parent 0b87147
commit e14d998
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute.cs b/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute.cs
@@ -127,6 +127,7 @@ private TgsGraphQLAuthorizeAttribute(IEnumerable<string> roleNames)
 			var listRoles = roleNames.ToList();
 			listRoles.Add(TgsAuthorizeAttribute.UserEnabledRole);
 			Roles = [.. listRoles];
+			Apply = ApplyPolicy.Validation;
 		}
 	}
 }
diff --git a/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute{TAuthority}.cs b/src/Tgstation.Server.Host/Security/TgsGraphQLAuthorizeAttribute{TAuthority}.cs
@@ -35,6 +35,7 @@ public TgsGraphQLAuthorizeAttribute(string methodName)
 				?? throw new InvalidOperationException($"Could not find method {authorityType}.{methodName}() has no {nameof(TgsAuthorizeAttribute)}!");
 			MethodName = methodName;
 			Roles = authorizeAttribute.Roles?.Split(',', StringSplitOptions.RemoveEmptyEntries);
+			Apply = ApplyPolicy.Validation;
 		}
 	}
 }