0

We have a issue and want to limit permission each roles.

Do we have any way to make Graphql can set permission roles as Rest API?

EX: Admin token with roles "sales", they only access Graphql APIs of Sales.

Improve this question

1 Answer 1

Reset to default
0

I wasn't able to find anything cleary documented regarding this, so here is what I used. Not sure if it's the best way so please let me know!

In resolver class or interface that handles the graphql request:

//add the dependency to your constructor Magento\Framework\AuthorizationInterface ... //use the authorization to check the resource id set in acl.xml // throw exception (or you could return false or do something else) if (!$this->authorization->isAllowed('Your_Resource_Id')) { throw new \Magento\Framework\Webapi\Exception(__('Forbidden'), 0, 403); }
Improve this answer

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.