default users without roles to public role

2021-07-06 17:13:02 +01:00 · 2021-07-06 17:13:02 +01:00 · 4e8b140c52
parent bd6de7fe31
commit 4e8b140c52
1 changed files with 1 additions and 1 deletions
--- a/packages/auth/src/security/roles.js
+++ b/packages/auth/src/security/roles.js
@ -226,7 +226,7 @@ exports.getAllRoles = async appId => {
      dbRole => exports.getExternalRoleID(dbRole._id) === builtinRoleId
    )[0]
    if (dbBuiltin == null) {
-      roles.push(builtinRole)
+      roles.push(builtinRole || builtinRoles.PUBLIC)
    } else {
      // remove role and all back after combining with the builtin
      roles = roles.filter(role => role._id !== dbBuiltin._id)