diff --git a/packages/xpub-faraday/config/authsome-mode.js b/packages/xpub-faraday/config/authsome-mode.js index a01f22101ba9216b97bdf65ed94eb3dc89ea1828..fd0acf1f424d2c65749e0c90280f5b5e93fc9c9c 100644 --- a/packages/xpub-faraday/config/authsome-mode.js +++ b/packages/xpub-faraday/config/authsome-mode.js @@ -81,6 +81,11 @@ async function applyAuthenticatedUserPolicy(user, operation, object, context) { } if (get(object, 'type') === 'collection') { + if ( + !filterDraftCollections(object) || + !filterTechnicalChecksCollections(object) + ) + return false return { filter: async collection => { const userPermissions = await helpers.getUserPermissions({