From 4113ae7ca5bad189e683f18fcabadc92ce65d2e3 Mon Sep 17 00:00:00 2001 From: Steven Nguyen Date: Wed, 19 Apr 2023 17:16:49 -0700 Subject: [PATCH] Allow updating document with read-only relationship A user should be able to update a document without touching the relationship. Relates: https://github.com/appwrite/appwrite/issues/5404 --- app/controllers/api/databases.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/app/controllers/api/databases.php b/app/controllers/api/databases.php index 8530e2f27b..bb41bfb26d 100644 --- a/app/controllers/api/databases.php +++ b/app/controllers/api/databases.php @@ -3279,7 +3279,6 @@ App::patch('/v1/databases/:databaseId/collections/:collectionId/documents/:docum $permissions = $document->getPermissions() ?? []; } - $data = \array_merge($document->getArrayCopy(), $data); $data['$collection'] = $collection->getId(); // Make sure user doesn't switch collectionID $data['$createdAt'] = $document->getCreatedAt(); // Make sure user doesn't switch createdAt $data['$id'] = $document->getId(); // Make sure user doesn't switch document unique ID @@ -3369,6 +3368,8 @@ App::patch('/v1/databases/:databaseId/collections/:collectionId/documents/:docum $checkPermissions($collection, $newDocument, $document, Database::PERMISSION_UPDATE); + $data = \array_merge($document->getArrayCopy(), $data); + try { $document = $dbForProject->withRequestTimestamp( $requestTimestamp,