Merge pull request #1270 from CodeForAfrica/ft/fix-user-read-permision

kelvinkipruto · web-flow · commit c137687bd8ec · 2025-09-15T06:08:44.000Z
fix(access): remove public read access from Users collections
diff --git a/apps/civicsignalblog/package.json b/apps/civicsignalblog/package.json
@@ -1,6 +1,6 @@
 {
   "name": "civicsignalblog",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "private": true,
   "author": "Code for Africa <tech@codeforafrica.org>",
   "description": "This is the (temporary) CivicSignal blog",
diff --git a/apps/civicsignalblog/src/payload/collections/Users.js b/apps/civicsignalblog/src/payload/collections/Users.js
@@ -22,7 +22,6 @@ const Users = {
   slug: "users",
   access: {
     create: isAdmin,
-    read: () => true,
     update: isAdminOrSelf,
     delete: isAdminOrSelf,
   },
diff --git a/apps/climatemappedafrica/package.json b/apps/climatemappedafrica/package.json
@@ -1,6 +1,6 @@
 {
   "name": "climatemappedafrica",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "private": true,
   "author": "Code for Africa <tech@codeforafrica.org>",
   "description": "ClimateMapped Africa",
diff --git a/apps/climatemappedafrica/src/payload/collections/Users.js b/apps/climatemappedafrica/src/payload/collections/Users.js
@@ -9,7 +9,6 @@ const User = {
   slug: "users",
   access: {
     create: isAdmin,
-    read: () => true,
     update: isAdminOrSelf,
     delete: isAdminOrSelf,
   },
diff --git a/apps/codeforafrica/package.json b/apps/codeforafrica/package.json
@@ -1,6 +1,6 @@
 {
   "name": "codeforafrica",
-  "version": "1.0.61",
+  "version": "1.0.62",
   "private": true,
   "author": "Code for Africa <tech@codeforafrica.org>",
   "description": "This is the main CFA site.",
diff --git a/apps/codeforafrica/src/payload/collections/Users.js b/apps/codeforafrica/src/payload/collections/Users.js
@@ -9,7 +9,6 @@ const Users = {
   slug: "users",
   access: {
     create: isAdmin,
-    read: () => true,
     update: isAdminOrSelf,
     delete: isAdminOrSelf,
   },
diff --git a/apps/roboshield/package.json b/apps/roboshield/package.json
@@ -1,6 +1,6 @@
 {
   "name": "roboshield",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "private": true,
   "scripts": {
     "build": "next build",
diff --git a/apps/roboshield/src/payload/collections/Users.ts b/apps/roboshield/src/payload/collections/Users.ts
@@ -9,7 +9,6 @@ const Users = {
   slug: "users",
   access: {
     create: isAdmin,
-    read: () => true,
     update: isAdminOrSelf,
     delete: isAdminOrSelf,
   },

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "civicsignalblog",`
`3`		`- "version": "0.1.19",`
	`3`	`+ "version": "0.1.20",`
`4`	`4`	`"private": true,`
`5`	`5`	`"author": "Code for Africa <tech@codeforafrica.org>",`
`6`	`6`	`"description": "This is the (temporary) CivicSignal blog",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "climatemappedafrica",`
`3`		`- "version": "0.0.5",`
	`3`	`+ "version": "0.0.6",`
`4`	`4`	`"private": true,`
`5`	`5`	`"author": "Code for Africa <tech@codeforafrica.org>",`
`6`	`6`	`"description": "ClimateMapped Africa",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "codeforafrica",`
`3`		`- "version": "1.0.61",`
	`3`	`+ "version": "1.0.62",`
`4`	`4`	`"private": true,`
`5`	`5`	`"author": "Code for Africa <tech@codeforafrica.org>",`
`6`	`6`	`"description": "This is the main CFA site.",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "roboshield",`
`3`		`- "version": "0.1.15",`
	`3`	`+ "version": "0.1.16",`
`4`	`4`	`"private": true,`
`5`	`5`	`"scripts": {`
`6`	`6`	`"build": "next build",`