basic permissions

src/clj/auto_ap/datomic/invoices.clj

@@ -1,6 +1,7 @@
 (ns auto-ap.datomic.invoices
   (:require [datomic.api :as d]
             [auto-ap.datomic :refer [uri]]
+            [auto-ap.graphql.utils :refer [limited-clients]]
             [clj-time.coerce :as c]
             [clojure.set :refer [rename-keys]]
             [clojure.string :as str]))
@@ -34,6 +35,8 @@
                          :where ['[?e :invoice/invoice-number]]}
                  :args [(d/db (d/connect uri))]}
 
+          (limited-clients (:id args)) (add-arg '[?xx ...] (set (map :id (limited-clients (:id args))))
+                                                '[?e :invoice/client ?xx])
           (:client-id args) (add-arg '?client-id (:client-id args)
                                      '[?e :invoice/client ?client-id])