Set default protectedFields and remove previous filter logic

2019-01-28 07:50:21 +00:00
parent 95831a5b22
commit b343de0c70
8 changed files with 91 additions and 14 deletions
--- a/src/Controllers/SchemaController.js
+++ b/src/Controllers/SchemaController.js
@@ -203,6 +203,7 @@ const CLPValidKeys = Object.freeze([
  'addField',
  'readUserFields',
  'writeUserFields',
+  'protectedFields',
 ]);
 function validateCLP(perms: ClassLevelPermissions, fields: SchemaFields) {
  if (!perms) {
@@ -250,7 +251,10 @@ function validateCLP(perms: ClassLevelPermissions, fields: SchemaFields) {
      verifyPermissionKey(key);
      // @flow-disable-next
      const perm = perms[operation][key];
-      if (perm !== true) {
+      if (
+        perm !== true &&
+        (operation !== 'protectedFields' || !Array.isArray(perm))
+      ) {
        // @flow-disable-next
        throw new Parse.Error(
          Parse.Error.INVALID_JSON,