Was queryHiddenFields recently removed from payload.find?

thgh.2 years ago

8

• 

  notchr2 years ago

  I don't think I see this type either. I see others though, like

  showHiddenFields
• 

  jmikrut

  2 years ago

  yes, I think it was accidentally documented and then never removed

  
  
  

  this had overlap with our security CVE

  
  
  

  it now just respects

  overrideAccess
• 

  thgh.2 years ago

  Alright, and overrideAccess is true by default, so it is enabled?

• 

  jarrod_not_jared

  2 years ago

  Yes

• 

  jmikrut

  2 years ago

  with the local API, yes,

  overrideAccess

  is true by default

  
  
  

  but for GraphQL and REST, it is false

• 

  thgh.2 years ago

  Can access functions always query all fields? (I think yes because I'm using it like that and noticed a typo since 1.7)

• 

  jmikrut

  2 years ago

  access functions are allowed to query hidden fields, yes

  
  
  

  BUT

  
  
  

  the query will still be validated

• 

  thgh.2 years ago

  Perfect 👍

  
  

  Only issue is that the error message was too vague, I hoped to find a trace to the exact problem in payload config.