From ad2342a08b680aef6154e09ed8307fab647dd459 Mon Sep 17 00:00:00 2001 From: Olivia Rodriguez Valdes Date: Fri, 1 Mar 2019 12:40:54 -0500 Subject: [PATCH] Verify there is a viewer on context --- graphene_django/utils.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/graphene_django/utils.py b/graphene_django/utils.py index 55581c4..f4800eb 100644 --- a/graphene_django/utils.py +++ b/graphene_django/utils.py @@ -122,7 +122,10 @@ def auth_resolver(parent_resolver, permissions, raise_exception, root, info, **a :return: Resolved field. None if the viewer does not have permission to access the field. """ # Get viewer from context + if not hasattr(info.context, 'user'): + raise PermissionDenied() user = info.context.user + if has_permissions(user, permissions): if parent_resolver: # A resolver is provided in the class