\r\n\r\n\r\nWhile I expect this to work:\r\n\u003Cimg width=\"1025\" alt=\"Screenshot 2025-01-10 at 12 13 52\" src=\"https://github.com/user-attachments/assets/4b549cd4-b47a-42cd-9a8a-17c552371c2b\" />\r\n\r\nI then tried the query with another role user (custom manager role), and that one actually does accept `\"role\": \"064e9313-8a1d-4134-837d-65761d4f45b6\"`.\r\nSo in order for my frontend to work, when the user is logged in as admin I need to sent like this:\r\n```\r\n{\r\n \"data\": {\r\n \"role\": {\r\n \"id\": \"064e9313-8a1d-4134-837d-65761d4f45b6\",\r\n \"name\": \"WHY NAME!? ROLE ALREADY EXISTS!\"\r\n }\r\n }\r\n}\r\n```\r\n\r\nAnd when logged in as manager I need to send like this:\r\n```\r\n{\r\n \"data\": {\r\n \"role\": \"064e9313-8a1d-4134-837d-65761d4f45b6\"\r\n }\r\n}\r\n```\r\n\r\nWhy on earth would it require a name? We not creating a role here....\n\n### To Reproduce\n\nSee steps above\n\n### Directus Version\n\nv11.3.5\n\n### Hosting Strategy\n\nSelf-Hosted (Docker Image)\n\n### Database\n\npg16",[],24383,"closed","Create user using GQL requires role.name","2025-02-13T16:04:45Z","https://github.com/directus/directus/issues/24383",0.6467541,{"description":3076,"labels":3077,"number":3081,"owner":3029,"repository":3029,"state":3070,"title":3082,"updated_at":3072,"url":3083,"score":3084},"### Describe the Bug\r\n\r\nHello,\r\nwe are using Docker in our project to start Directus. \r\nIn the docker-compose file i changed the directus version from 11.1.0 to 11.3.5 and rebuilt/relaunched to container.\r\nDirectus not start correctly and i become this Error:\r\n\r\n```\r\n[09:08:06.963] INFO: Skipping CLI extensions initialization due to outstanding migrations.\r\n[09:08:06.980] INFO: Initializing bootstrap...\r\n[09:08:06.985] INFO: Database already initialized, skipping install\r\n[09:08:06.986] INFO: Running migrations...\r\n[09:08:06.998] INFO: Applying Consolidate Content Versioning...\r\nerror: alter table \"directus_versions\" add column \"delta\" json - column \"delta\" of relation \"directus_versions\" already exists\r\n at Parser.parseErrorMessage (/directus/node_modules/.pnpm/pg-protocol@1.7.0/node_modules/pg-protocol/dist/parser.js:283:98)\r\n at Parser.handlePacket (/directus/node_modules/.pnpm/pg-protocol@1.7.0/node_modules/pg-protocol/dist/parser.js:122:29)\r\n at Parser.parse (/directus/node_modules/.pnpm/pg-protocol@1.7.0/node_modules/pg-protocol/dist/parser.js:35:38)\r\n at TLSSocket.\u003Canonymous> (/directus/node_modules/.pnpm/pg-protocol@1.7.0/node_modules/pg-protocol/dist/index.js:11:42)\r\n at TLSSocket.emit (node:events:517:28)\r\n at addChunk (node:internal/streams/readable:368:12)\r\n at readableAddChunk (node:internal/streams/readable:341:9)\r\n at Readable.push (node:internal/streams/readable:278:10)\r\n at TLSWrap.onStreamRead (node:internal/stream_base_commons:190:23) {\r\n length: 141,\r\n severity: 'ERROR',\r\n code: '42701',\r\n detail: undefined,\r\n hint: undefined,\r\n position: undefined,\r\n internalPosition: undefined,\r\n internalQuery: undefined,\r\n where: undefined,\r\n schema: undefined,\r\n table: undefined,\r\n column: undefined,\r\n dataType: undefined,\r\n constraint: undefined,\r\n file: 'tablecmds.c',\r\n line: '7044',\r\n routine: 'check_for_column_name_collision'\r\n ```\r\n\r\n\r\nWe are using the official Directus image and here is our Docker file:\r\n\r\n```yaml\r\nversion: \"3\"\r\n\r\nnetworks:\r\n default:\r\n name: ${STACK_PRFX}\r\n\r\nservices:\r\n database:\r\n container_name: ${STACK_PRFX}-database\r\n image: postgres:14.13\r\n volumes:\r\n - ./data:/var/lib/postgresql\r\n env_file:\r\n - .env\r\n healthcheck:\r\n test: [ \"CMD-SHELL\", \"pg_isready -U ${DB_USER}\" ]\r\n interval: 2s\r\n timeout: 20s\r\n retries: 10\r\n\r\n directus_extension:\r\n container_name: ${STACK_PRFX}-directus-extension\r\n image: node:current-alpine\r\n volumes:\r\n - ${EXTENSION_SOURCE_DIR}:/directus\r\n - ~/.ssh:/tmp/.ssh\r\n - ~/.git-credentials:/tmp/.git-credentials\r\n entrypoint: \"\"\r\n command: sh -c \"\r\n apk update && apk add git openssh &&\r\n cd /directus && mkdir -p /root/.ssh &&\r\n cp -r /tmp/.ssh/* /root/.ssh || true &&\r\n cp -r /tmp/.git-credentials /root/.git-credentials &&\r\n git config --global http.sslVerify false &&\r\n git config --global credential.helper store &&\r\n [ \\\"$(ls -A .)\\\" ] || git clone ${EXTENSION_REPO_URL} . &&\r\n git config --global --add safe.directory /directus &&\r\n [ -z \"${EXTENSION_BRANCH}\" ] || git checkout $EXTENSION_BRANCH &&\r\n npm config set strict-ssl false &&\r\n npm install --loglevel verbose && npm run build\r\n \"\r\n\r\n directus:\r\n container_name: ${STACK_PRFX}-directus\r\n image: directus/directus:11.3.5\r\n\r\n ports:\r\n - 8055:8055\r\n volumes:\r\n - ./uploads:/directus/uploads\r\n - ${EXTENSION_SOURCE_DIR}/dist:/directus/extensions/directus-extension-bonus/dist\r\n - ${EXTENSION_SOURCE_DIR}/package.json:/directus/extensions/directus-extension-bonus/package.json\r\n depends_on:\r\n database:\r\n condition: service_healthy\r\n directus_extension:\r\n condition: service_completed_successfully\r\n env_file:\r\n - .env\r\n\r\n directus_scripts:\r\n container_name: ${STACK_PRFX}-directus_scripts\r\n build:\r\n context: \"./python\"\r\n environment:\r\n DIRECTUS_BASE_URL: http://directus:8055\r\n DIRECTUS_API_KEY: ${DIRECTUS_API_KEY}\r\n DIRECTORY: ${DIRECTORY}\r\n SCRIPT: ${SCRIPT}\r\n profiles:\r\n - directus_scripts\r\n volumes:\r\n - ./../../directus_deployment:/usr/src/app/directus_deployment\r\n command: sh -c \"\r\n cd $DIRECTORY && python $SCRIPT\r\n \"\r\n``` \r\n\r\n\r\n\r\n### To Reproduce\r\n\r\nMigrate from 11.1.0 → 11.3.5 using docker and relaunch the container\r\n\r\n### Directus Version\r\n\r\nv11.3.5\r\n\r\n### Hosting Strategy\r\n\r\nSelf-Hosted (Docker Image)\r\n\r\n### Database\r\n\r\npostgres:14.13",[3078],{"name":3079,"color":3080},"Needs Info","BFDADC",24403,"Migration from 11.1.0 to 11.3.5 not applied automatically using docker","https://github.com/directus/directus/issues/24403",0.66364855,{"description":3086,"labels":3087,"number":3088,"owner":3029,"repository":3029,"state":3070,"title":3089,"updated_at":3072,"url":3090,"score":3084},"### Describe the Bug\n\nOur nexus-iq scanner detect a High risk CVSS score by this component pm2-deploy : 1.0.2.\r\nSonartype CWE: https://cwe.mitre.org/data/definitions/78.html\r\n\r\nExplanation\r\nThe pm2-deploy package is vulnerable to OS Command Injection. The deployForEnv function which internally calls the spawn function in the deploy.js file fails to sanitize the user supplied config before using it to construct a command that is executed via spawn(). An attacker with the ability to modify the deployConfig can exploit this vulnerability to execute arbitrary commands by supplying a combination of shell meta-characters and commands to the affected functionalities.\r\n\r\nDetection\r\nThe application is vulnerable by using this component.\r\n\r\nRecommendation\r\nThere is no non-vulnerable upgrade path for this component/package. We recommend investigating alternative components or a potential mitigating control.\r\n\r\nVersion Affected\r\n[0.0.1-beta,1.0.2]\r\nRoot Cause\r\npm2-deploy-1.0.2.tgzpackage/deploy.js( , )\r\nAdvisories\r\nThird Partyhttps://github.com/418sec/huntr/pull/1239\r\nCVSS Details\r\nSonatype CVSS 38.8\r\nCVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n### To Reproduce\n\nThe application is vulnerable by using this component.\n\n### Directus Version\n\nv11.3.5\n\n### Hosting Strategy\n\nSelf-Hosted (Docker Image)\n\n### Database\n\npostgres:14.13",[],24405,"sonatype-2020-1157 - pm2-deploy : 1.0.2","https://github.com/directus/directus/issues/24405",{"description":3092,"labels":3093,"number":3094,"owner":3029,"repository":3029,"state":3070,"title":3095,"updated_at":3096,"url":3097,"score":3098},"### Describe the Bug\r\n\r\nEvery time in Google Chrome (127.0.6533.100, arm64, macOS Sonoma 14.5) when I leave the tab with my Directus instance (Docker), I get this error:\r\n\r\n\u003Cimg width=\"1680\" alt=\"Снимок экрана 2024-08-11 в 11 29 16\" src=\"https://github.com/user-attachments/assets/e17eb10b-e975-4091-86f8-7df82b86263f\">\r\n\r\nGoogle Chrome's console error output:\r\n\r\n```console\r\nindex.Cbt_QVmx.entry.js:28 \r\n GET https://my-domain.net/users/me?fields=id net::ERR_NAME_NOT_RESOLVED\r\n\r\nruntime-core.esm-bundler-zlSgKseS.js:13 \r\n TypeError: Cannot read properties of null (reading 'id')\r\n at index-CdpNzPja.js:1:2455\r\n at At.fn (runtime-core.esm-bun…-zlSgKseS.js:9:9380)\r\n at At.run (runtime-core.esm-bun…-zlSgKseS.js:9:1517)\r\n at get value (runtime-core.esm-bun…-zlSgKseS.js:9:9624)\r\n at Ml (runtime-core.esm-bun…-zlSgKseS.js:9:1674)\r\n at get dirty (runtime-core.esm-bun…-zlSgKseS.js:9:1236)\r\n at S.c.update (runtime-core.esm-bun…lSgKseS.js:13:42437)\r\n at We (runtime-core.esm-bun…zlSgKseS.js:13:1381)\r\n at Fr (runtime-core.esm-bun…zlSgKseS.js:13:3111)\r\n\r\nruntime-core.esm-bundler-zlSgKseS.js:13 \r\n TypeError: Cannot read properties of null (reading 'id')\r\n at index-CdpNzPja.js:1:7446\r\n at At.fn (runtime-core.esm-bun…-zlSgKseS.js:9:9380)\r\n at At.run (runtime-core.esm-bun…-zlSgKseS.js:9:1517)\r\n at get value (runtime-core.esm-bun…-zlSgKseS.js:9:9624)\r\n at Ml (runtime-core.esm-bun…-zlSgKseS.js:9:1674)\r\n at get dirty (runtime-core.esm-bun…-zlSgKseS.js:9:1236)\r\n at W (runtime-core.esm-bun…lSgKseS.js:13:12506)\r\n at We (runtime-core.esm-bun…zlSgKseS.js:13:1381)\r\n at Fr (runtime-core.esm-bun…zlSgKseS.js:13:3111)\r\n\r\nindex-D0fNzGU9.js:3 \r\n GET https://mydomain.net/server/info net::ERR_NAME_NOT_RESOLVED\r\n\r\nindex-D0fNzGU9.js:3 \r\n GET https://mydomain.net/auth?sessionOnly net::ERR_NAME_NOT_RESOLVED\r\n```\r\n\r\nError message (from Directus copy-paste button):\r\n\r\n```console\r\n{\r\n \"message\": \"Network Error\",\r\n \"name\": \"AxiosError\",\r\n \"code\": \"ERR_NETWORK\",\r\n \"config\": {}\r\n}\r\n```\r\n\r\n### To Reproduce\r\n\r\n1. Open your Directus instance in Google Chrome;\r\n2. Login to the admin dashboard;\r\n3. Go to `/admin/settings/data-model` page;\r\n4. Switch Chrome's tab to another website and wait some time;\r\n5. Return to Directus tab;\r\n6. Directus redirect you to `/admin/login?reason=SESSION_EXPIRED` page;\r\n7. See error.\r\n\r\n### Directus Version\r\n\r\nv11.0.1\r\n\r\n### Hosting Strategy\r\n\r\nSelf-Hosted (Docker Image)\r\n\r\n### Database\r\n\r\nPostgreSQL 16",[],23283,"[BUG, v11] UNKNOWN Network Error","2024-10-12T02:45:42Z","https://github.com/directus/directus/issues/23283",0.66643214,{"description":3100,"labels":3101,"number":3103,"owner":3029,"repository":3029,"state":3070,"title":3104,"updated_at":3105,"url":3106,"score":3107},"I have a bundle folder inside my local directus extensions folder that includes the dist (Built extension) and package.json file. It was working properly in version 10.8.3 but after updating my directus to 10.11.1 it is throwing this error.\r\n\r\n\r\n\r\nEven tho my package.json file includes the same content as it had in 10.8.3. \r\n\r\n\r\nI thought this `Value for field \"name\" in collection \"directus_extensions\" can't be null.` had something to do with the objects entries for extensions in package.json but I dont think it is an issue in here. I believe that it is related to postgres, I'll check if the field exists if not I'll try to manually create a field \"name\" in \"directus_extension\" in postgres and will see if it works. Creating an issue right now so maybe somebody can tell me whats happening after we update our directus? Like are the missing fields being automatically generated in our postgres or do we have to create it every single time manually? \r\n\r\n\r\n\r\n### To Reproduce\r\n\r\n1. Create a Directus bundle extension (in that bundle I have endpoint, displays, module, interface and hooks extension)\r\n2. Build that bundle extension and put the dist folder generated after building the extension along with your package.json file in your local directus app extension folder.\r\n3. Upgrade directus to 10.11.1 and run the app.\r\n\r\n### Directus Version\r\n\r\n10.11.1\r\n\r\n### Hosting Strategy\r\n\r\nSelf-Hosted (Docker Image)\r\n\r\n### Database\r\n\r\nPostgreSQL 14.4",[3102],{"name":3079,"color":3080},22639,"Cannot load extension bundle on windows after updating Directus from 10.8.3 to 10.11.1","2024-09-10T02:45:28Z","https://github.com/directus/directus/issues/22639",0.6710023,{"description":3109,"labels":3110,"number":3111,"owner":3029,"repository":3029,"state":3070,"title":3112,"updated_at":3113,"url":3114,"score":3115},"### Describe the Bug\n\non the latest sdk type the type of the function readRelation dot not require a Query but use a generic callled TQuery as a Directus.Query into the ReadRelationOutput where his generic require the ItemObject (the DirectusRelation type)\r\n\r\n\r\n \n\n### To Reproduce\n\ninstall the latest version of the sdk package\n\n### Directus Version\n\nv11.1.1\n\n### Hosting Strategy\n\nSelf-Hosted (Custom)\n\n### Database\n\n_No response_",[],23850,"sdk types not accurate","2024-12-18T02:51:31Z","https://github.com/directus/directus/issues/23850",0.677469,{"description":3117,"labels":3118,"number":3119,"owner":3029,"repository":3029,"state":3070,"title":3120,"updated_at":3121,"url":3122,"score":3123},"### Describe the Bug\n\nWhen creating a user with REST having a custom ID it works\r\n\r\n```json\r\n{\r\n\t\"email\": \"another@example.com\",\r\n\t\"password\": \"d1r3ctu5\",\r\n\t\"id\": \"22\"\r\n}\r\n```\r\n\r\nBut when browsing the USER through the interface, an errror shows up :\r\n\r\n`[FORBIDDEN] You don't have permission to access this.`\r\n\r\nFurthermore, creating a user with the GraphQL api works, but fails to return back the data\r\n\r\n```json\r\n{\r\n\t\"data\": {\r\n\t\t\"create_users_item\": null\r\n\t},\r\n\t\"errors\": [\r\n\t\t{\r\n\t\t\t\"message\": \"You don't have permission to access this.\",\r\n\t\t\t\"extensions\": {\r\n\t\t\t\t\"code\": \"INTERNAL_SERVER_ERROR\"\r\n\t\t\t},\r\n\t\t\t\"locations\": [\r\n\t\t\t\t{\r\n\t\t\t\t\t\"line\": 2,\r\n\t\t\t\t\t\"column\": 2\r\n\t\t\t\t}\r\n\t\t\t],\r\n\t\t\t\"path\": [\r\n\t\t\t\t\"create_users_item\"\r\n\t\t\t]\r\n\t\t}\r\n\t]\r\n}\r\n```\n\n### To Reproduce\n\nUse the API to create a user adding the ID field\r\n```json\r\n{\r\n\t\"email\": \"another@example.com\",\r\n\t\"password\": \"d1r3ctu5\",\r\n\t\"id\": \"22\"\r\n}\r\n```\r\n\r\nAccess the interface `/admin/users/22` and check the interface\n\n### Directus Version\n\nv10.4.3\n\n### Hosting Strategy\n\nSelf-Hosted (Docker Image)",[],19213,"Create user with custom ID woes","2024-02-01T07:03:53Z","https://github.com/directus/directus/issues/19213",0.68235517,["Reactive",3125],{},["Set"],["ShallowReactive",3128],{"$fTRc1wZytZ_XrK4EfJfei_Sz-An4H4Yy6syhVxH_PVJc":-1,"$fKJanCqnWQ6s6_4woBc_a7Us-WyKUcReVQTCmVv6fvdk":-1},"/directus/directus/23918"]