anonymous & user select permission

[schwamic]

Hi! I have a role anonymous and a role user. anonymous is able to see all users name and picture. user is able to see all users name and picture and more if the user-object fits their id. At the moment if I'm logged in as user, I can only see my user-data, but not the name/picture of the other users. I expected that user is able to see what I defined here: x-hasura-allowed-roles": ["user", "anonymous"], but it seems that roles can't be combined?

Is there a way to set this kind of permissions or do I have to add another table like user_private / user_public?

Here my settings:

// User who is logged in
"x-hasura-default-role": "user",
"x-hasura-allowed-roles": ["user", "anonymous"],
"x-hasura-user-id": user.user_id,
username: user.username,

---

---

[schwamic]

solution: https://hasura.io/docs/1.0/graphql/core/auth/authorization/role-multiple-rules.html