@zenstackhq/plugin-policy 3.0.0-beta.30 → 3.0.0-beta.31

package/dist/index.js

@@ -911,6 +911,7 @@ var PolicyHandler = class extends OperationNodeTransformer {
       return proceed(this.transformNode(node));
     }
     const { mutationModel } = this.getMutationModel(node);
+    this.tryRejectNonexistentModel(mutationModel);
     if (InsertQueryNode.is(node)) {
       const isManyToManyJoinTable = this.isManyToManyJoinTable(mutationModel);
       let needCheckPreCreate = true;
@@ -1077,6 +1078,7 @@ var PolicyHandler = class extends OperationNodeTransformer {
     if (!table) {
       return super.transformJoin(node);
     }
+    this.tryRejectNonexistentModel(table.model);
     const filter = this.buildPolicyFilter(table.model, table.alias, "read");
     const nestedSelect = {
       kind: "SelectQueryNode",
@@ -1469,6 +1471,7 @@ var PolicyHandler = class extends OperationNodeTransformer {
       const extractResult = this.extractTableName(table);
       if (extractResult) {
         const { model, alias } = extractResult;
+        this.tryRejectNonexistentModel(model);
         const filter = this.buildPolicyFilter(model, alias, "read");
         return acc ? conjunction(this.dialect, [
           acc,
@@ -1556,6 +1559,11 @@ var PolicyHandler = class extends OperationNodeTransformer {
       bQuery
     ]).toOperationNode();
   }
+  tryRejectNonexistentModel(model) {
+    if (!QueryUtils2.hasModel(this.client.$schema, model) && !this.isManyToManyJoinTable(model)) {
+      throw createRejectedByPolicyError(model, RejectedByPolicyReason.NO_ACCESS);
+    }
+  }
 };
 
 // src/functions.ts