graphql_data_is_private not getting called

[lance-anderson]

The code block below has been added to my theme's functions.php. When I make a GraphQL request, the PHP log file includes the first error_log but not the second. I am stumped. What am I missing? Any possible reasons why the graphql_data_is_private callback isn't getting called?

Everything works as expected when the a Post is published as "public". But if I publish a post as "private" the graphql_data_is_private is not called and the GraphQL query no longer returns the content.

functions.php

error_log('>>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>');
add_filter(
  'graphql_data_is_private',
  function( $is_private, $model_name, $data, $visibility, $owner, $current_user ) {
    error_log('>>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>');
    return false;
  },
  10,
  6
);

error.log

[14-Sep-2022 05:14:19 UTC] >>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>
[14-Sep-2022 05:14:31 UTC] >>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>
[14-Sep-2022 05:14:51 UTC] >>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>
[14-Sep-2022 05:15:06 UTC] >>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>
[14-Sep-2022 05:16:15 UTC] >>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>

[jasonbahl]

@lance-anderson what's an example of a query that you're executing and expecting to see that log?

[jasonbahl]

@lance-anderson if I add your code like so:

add_action( 'init', function() {

	error_log('>>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>');

	add_filter(
		'graphql_data_is_private',
		function( $is_private, $model_name, $data, $visibility, $owner, $current_user ) {
			error_log('>>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>');
			return false;
		},
		10,
		6
	);

});

Then execute the following query:

{
	posts {
    nodes {
      id
      title
    }
  }
}

I see the following output in my error log:

[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> call graphql_data_is_private >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>
[21-Sep-2022 20:57:35 UTC] >>>>>>>>>>>>> graphql_data_is_private callback >>>>>>>>>>>>>>>>

The first error log is called on init, but the others are called when the nodes (posts) are being resolved and determined whether they're public or private.

If you're querying something that doesn't load a Model, then that filter wouldn't be executed.

An introspection query, for example, wouldn't try to load a model. Currently queries for settings, such as:

{
  generalSettings { 
    url 
  } 
}

also do not load a model and would not execute this filter.