Skip to main content

deny_protected_fields

parse_rust_rest::clp

Function deny_protected_fields 

Source 
pub fn deny_protected_fields(
    plan: Option<&ProtectedFieldPlan>,
    class_name: &str,
    where_: &ParsedWhere,
    order: &[(String, SortDirection)],
    detail: ErrorDetail,
) -> Result<(), ParseError>
Expand description

denyProtectedFields (RestQuery.js:928-984).

A pre-flight denial, not a filter. Without it a client binary-searches a protected value through equality constraints even though the field never appears in a response.

Both denials are createSanitizedError call sites (RestQuery.js:949, :976). Note what that means at the default: the client learns it was refused, but not which field it named.