restrict admin send login link to only admin

xmmedia · Dec 5, 2024 · aead30f · aead30f
1 parent 6efb4a4
commit aead30f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/graphql/types/user.mutation.yaml b/config/graphql/types/user.mutation.yaml
@@ -103,6 +103,7 @@ UserMutation:
             AdminUserSendLoginLink:
                 type:        AdminUserLoginLinkMutationPayload!
                 description: 'Send a magic login link to a user.'
+                access:      '@=hasRole("ROLE_ADMIN")'
                 resolve:     '@=mutation("App\\GraphQl\\Mutation\\User\\AdminUserSendLoginLinkMutation", args["userId"])'
                 args:
                     userId: UserId!