From 4af7b9a81bb983f7b18401d52458957fa5baf965 Mon Sep 17 00:00:00 2001
From: Sergey Chikanov <sergey.chikanov@liverate.de>
Date: Tue, 31 Mar 2020 11:30:58 +0200
Subject: [PATCH] prevent leaking private keys from configs to all users

---
 src/data/resolvers/queries/configs.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/data/resolvers/queries/configs.ts b/src/data/resolvers/queries/configs.ts
index 2696513ad..fdd33fb03 100644
--- a/src/data/resolvers/queries/configs.ts
+++ b/src/data/resolvers/queries/configs.ts
@@ -1,5 +1,5 @@
 import { Configs } from '../../../db/models';
-import { moduleRequireLogin } from '../../permissions/wrappers';
+import { moduleCheckPermission, moduleRequireLogin } from '../../permissions/wrappers';
 import { IContext } from '../../types';
 import { frontendEnv, getEnv, sendRequest } from '../../utils';
 
@@ -54,4 +54,6 @@ const configQueries = {
 
 moduleRequireLogin(configQueries);
 
+moduleCheckPermission(configQueries, 'generalSettings', 'showGeneralSettings');
+
 export default configQueries;