remult 0.27.24-next.0 → 0.27.24-next.2

package/esm/src/data-api.js

@@ -173,6 +173,9 @@ export class DataApi {
         }
     }
     async groupBy(request, body) {
+        if (!this.repository.metadata.apiReadAllowed) {
+            throw new ForbiddenError();
+        }
         let findOptions = await this.findOptionsFromRequest(request, body);
         let orderBy = {};
         if (body?.orderBy) {

package/esm/src/remult3/RepositoryImplementation.js

@@ -1513,7 +1513,8 @@ export class rowHelperImplementation extends rowHelperBase {
                         if (Object.prototype.hasOwnProperty.call(d, key)) {
                             const element = d[key];
                             if (this.fields.find(key).valueChanged() &&
-                                !ignoreKeys.includes(key)) {
+                                !ignoreKeys.includes(key) &&
+                                element !== undefined) {
                                 changesOnly[key] = element;
                                 wasChanged = true;
                             }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "remult",
-    "version": "0.27.24-next.0",
+    "version": "0.27.24-next.2",
     "description": "A CRUD framework for full-stack TypeScript",
     "homepage": "https://remult.dev",
     "repository": {

package/src/data-api.js

@@ -354,7 +354,11 @@ var DataApi = /** @class */ (function () {
             var _f, _g, _h, _j, _k, _l;
             return tslib_1.__generator(this, function (_m) {
                 switch (_m.label) {
-                    case 0: return [4 /*yield*/, this.findOptionsFromRequest(request, body)];
+                    case 0:
+                        if (!this.repository.metadata.apiReadAllowed) {
+                            throw new server_action_js_1.ForbiddenError();
+                        }
+                        return [4 /*yield*/, this.findOptionsFromRequest(request, body)];
                     case 1:
                         findOptions = _m.sent();
                         orderBy = {};

package/src/remult3/RepositoryImplementation.js

@@ -2496,7 +2496,8 @@ var rowHelperImplementation = /** @class */ (function (_super) {
                             if (Object.prototype.hasOwnProperty.call(d, key)) {
                                 element = d[key];
                                 if (this.fields.find(key).valueChanged() &&
-                                    !ignoreKeys.includes(key)) {
+                                    !ignoreKeys.includes(key) &&
+                                    element !== undefined) {
                                     changesOnly[key] = element;
                                     wasChanged = true;
                                 }