Return more explicit message if user don't have rights.

overblog · Mar 9, 2016 · b9400f7 · b9400f7
1 parent 631e5ff
commit b9400f7
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/Resolver/ConfigResolver.php b/Resolver/ConfigResolver.php
@@ -15,6 +15,7 @@
 use Overblog\GraphQLBundle\Definition\Argument;
 use Overblog\GraphQLBundle\Definition\ArgsInterface;
 use Overblog\GraphQLBundle\Definition\FieldInterface;
+use Overblog\GraphQLBundle\Error\UserError;
 use Overblog\GraphQLBundle\Relay\Connection\Output\Connection;
 use Overblog\GraphQLBundle\Relay\Connection\Output\Edge;
 use Symfony\Component\ExpressionLanguage\ExpressionLanguage;
@@ -265,7 +266,11 @@ private function resolveAccessAndWrapResolveCallback($expression, callable $reso
                     $access = false;
                 }
 
-                return (bool) $access;
+                if (!$access) {
+                    throw new UserError('Access denied to this field.');
+                }
+
+                return true;
             };
 
             if (is_array($result) || $result instanceof \ArrayAccess) {