remult 0.27.24-next.1 → 0.27.24-next.2

package/esm/src/data-api.js

@@ -173,6 +173,9 @@ export class DataApi {
         }
     }
     async groupBy(request, body) {
+        if (!this.repository.metadata.apiReadAllowed) {
+            throw new ForbiddenError();
+        }
         let findOptions = await this.findOptionsFromRequest(request, body);
         let orderBy = {};
         if (body?.orderBy) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "remult",
-    "version": "0.27.24-next.1",
+    "version": "0.27.24-next.2",
     "description": "A CRUD framework for full-stack TypeScript",
     "homepage": "https://remult.dev",
     "repository": {

package/src/data-api.js

@@ -354,7 +354,11 @@ var DataApi = /** @class */ (function () {
             var _f, _g, _h, _j, _k, _l;
             return tslib_1.__generator(this, function (_m) {
                 switch (_m.label) {
-                    case 0: return [4 /*yield*/, this.findOptionsFromRequest(request, body)];
+                    case 0:
+                        if (!this.repository.metadata.apiReadAllowed) {
+                            throw new server_action_js_1.ForbiddenError();
+                        }
+                        return [4 /*yield*/, this.findOptionsFromRequest(request, body)];
                     case 1:
                         findOptions = _m.sent();
                         orderBy = {};