Open
Description
GraphQLite seems to have an issue when you uses $user
as argument:
/**
* @Query
* @Logged
* @Security("is_granted('GET_USER', user)")
*/
public function user(User $user): User
{
// ...
}
Here the subject of the voter, user
, is always equals to the authenticated user.
Workaround: rename the argument $user
.