Moderator doesn't inherit user permissions with Rajska
Description
With the new authorizations via Rajska, moderators can't access queries authorized for user only.
Steps to Reproduce
- Try to log in with a moderator (via Keycloak in my case)
Actual behaviour:
{
"data": { "loggedUser": null },
"errors": [
{
"code": "unauthorized",
"field": null,
"locations": [{ "column": 3, "line": 2 }],
"message": "Vous n'avez pas la permission de faire ceci",
"path": ["loggedUser"],
"status_code": 403
}
]
}
Reproduces how often:
Every time.
Versions
v3.1.0-beta.1 (4a8ea173)
Additional Information
For this endpoint, only user role is permited. I think some logic is missing here to authorize any user role if the allowed role is user.