Fix MfaStatus policy subject

Taucher2003 · Taucher2003 · commit 31c4830c3519 · 2026-07-28T19:53:14.000+02:00
diff --git a/app/graphql/types/mfa_status_type.rb b/app/graphql/types/mfa_status_type.rb
@@ -5,6 +5,7 @@ class MfaStatusType < Types::BaseObject
     description 'Represents the MFA status of a user'
 
     authorize :read_mfa_status
+    declarative_policy_subject { |obj| obj[:user] }
 
     field :enabled, Boolean, null: false,
                              description: 'Indicates whether MFA is enabled for the user.'
diff --git a/app/graphql/types/user_type.rb b/app/graphql/types/user_type.rb
@@ -75,6 +75,7 @@ def mfa_status
         enabled: object.mfa_enabled?,
         totp_enabled: object.totp_secret.present?,
         backup_codes_count: object.backup_codes.size,
+        user: object,
       }
     end
   end

Original file line number	Diff line number	Diff line change
`@@ -75,6 +75,7 @@ def mfa_status`
`75`	`75`	`enabled: object.mfa_enabled?,`
`76`	`76`	`totp_enabled: object.totp_secret.present?,`
`77`	`77`	`backup_codes_count: object.backup_codes.size,`
	`78`	`+ user: object,`
`78`	`79`	`}`
`79`	`80`	`end`
`80`	`81`	`end`