fix private rule bug

sundersc · Apr 2, 2024 · 7c2b1c4 · 7c2b1c4
1 parent c2e16de
commit 7c2b1c4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/amplify-graphql-auth-transformer/src/graphql-auth-transformer.ts b/packages/amplify-graphql-auth-transformer/src/graphql-auth-transformer.ts
@@ -129,10 +129,10 @@ const getReadRolesForField = (acm: AccessControlMatrix, readRoles: Array<string>
  let allowedRoles = [...readRoles];
 
  if (hasCognitoPrivateRole) {
- allowedRoles = allowedRoles.filter((r) => !(r.startsWith(`${acm.getName()}:userPools:`) && r !== 'userPools:private'));
+ allowedRoles = allowedRoles.filter((r) => !(r.startsWith(`${acm.getName()}:userPools:`) && r !== `${acm.getName()}:userPools:private`));
  }
  if (hasOIDCPrivateRole) {
- allowedRoles = allowedRoles.filter((r) => !(r.startsWith(`${acm.getName()}:oidc:`) && r !== 'oidc:private'));
+ allowedRoles = allowedRoles.filter((r) => !(r.startsWith(`${acm.getName()}:oidc:`) && r !== `${acm.getName()}:oidc:private`));
  }
  return allowedRoles;
 };