I am working on a query library, which provides ease of making complex queries. I added a feature to blacklist some fields like passwords or other similar fields, which can not be accessed. It’s working in case of select, group_by, join. It returns an error if the user is trying to query a field that is blacklisted.
The problem is with where
and preload
. It returns an error if we try to query a blacklisted field with where
but returns the record with all the blacklisted fields
if we query some other non-blacklisted field. similar is the case with preload. It returns the complete record with all the blacklisted fields included.
It’s an open-source library so removing blacklisted fields from the Jason encoder is not an option.
Can you please suggest any solutions.
Thanks.