reimplemented security

src/clj/auto_ap/datomic/checks.clj

@@ -1,6 +1,7 @@
 (ns auto-ap.datomic.checks
   (:require [datomic.api :as d]
             [auto-ap.datomic :refer [uri]]
+            [auto-ap.graphql.utils :refer [limited-clients]]
             [clojure.set :refer [rename-keys]]
             [clj-time.coerce :as c]))
 
@@ -32,6 +33,9 @@
                                :where ['[?e :payment/client]]}
                        :args [(d/db (d/connect uri))]}
 
+                (limited-clients (:id args)) (add-arg '[?xx ...] (set (map :db/id (limited-clients (:id args))))
+                                                      '[?e :payment/client ?xx])
+
                 (:client-id args) (add-arg '?client-id (:client-id args)
                                               '[?e :payment/client ?client-id])
                 (:original-id args) (add-arg '?original-id (cond-> (:original-id args) (string? (:original-id args)) Long/parseLong )