From e12a5f5665820b09116869e8eabd34024d22ffa4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cam=20Sa=C3=BCl?= <cammsaul@gmail.com>
Date: Wed, 7 Dec 2016 15:37:34 -0800
Subject: [PATCH] Filter out fields you're not allowed to see when hydrating
:target
---
src/metabase/models/field.clj | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/metabase/models/field.clj b/src/metabase/models/field.clj
index 1a4e27f507f..4d3830a35b8 100644
--- a/src/metabase/models/field.clj
+++ b/src/metabase/models/field.clj
@@ -106,7 +106,7 @@
(:fk_target_field_id field))]
(:fk_target_field_id field)))
id->target-field (u/key-by :id (when (seq target-field-ids)
- (db/select Field :id [:in target-field-ids])))]
+ (filter i/can-read? (db/select Field :id [:in target-field-ids]))))]
(for [field fields
:let [target-id (:fk_target_field_id field)]]
(assoc field :target (id->target-field target-id)))))
--
GitLab