[fix] no 'update' perm needed for 'create' dataobject operation (#976)

pierre-kubica · web-flow · commit 703f13a6c724 · 2025-05-13T08:47:51.000+02:00
diff --git a/src/GraphQL/Mutation/MutationType.php b/src/GraphQL/Mutation/MutationType.php
@@ -628,7 +628,7 @@ public function buildDataObjectMutations(&$config = [], $context = [])
                             $newInstance->setType($args['type']);
                         }
 
-                        $resolver = $me->getUpdateObjectResolver($processors, $localeService, $newInstance, $me->omitPermissionCheck);
+                        $resolver = $me->getUpdateObjectResolver($processors, $localeService, $newInstance, true);
 
                         $returnValue = call_user_func_array($resolver, [$value, $args, $context, $info]);
                         if (isset($returnValue['success']) === true &&

Original file line number	Diff line number	Diff line change
`@@ -628,7 +628,7 @@ public function buildDataObjectMutations(&$config = [], $context = [])`
`628`	`628`	`$newInstance->setType($args['type']);`
`629`	`629`	`}`
`630`	`630`
`631`		`- $resolver = $me->getUpdateObjectResolver($processors, $localeService, $newInstance, $me->omitPermissionCheck);`
	`631`	`+ $resolver = $me->getUpdateObjectResolver($processors, $localeService, $newInstance, true);`
`632`	`632`
`633`	`633`	`$returnValue = call_user_func_array($resolver, [$value, $args, $context, $info]);`
`634`	`634`	`if (isset($returnValue['success']) === true &&`