hide sensitive data from relationship field

[wise mica]

In my collections I'm having a field called "author", having a relationship to my users table and per default set to user.id

But when querying the field using the rest api I'm getting the complete data from the users collections including all fields and also sensitive Data such as the api key.
The users name would be completely sufficient.

Can I change this anywhere? Some best practices?

[celest cargo]

New Community-Help Thread Created!

Help is on the way! To mark it as solved, use the /solve command. In the meantime, here are some existing threads that may help you:

Documentation:

• admin-config
• querying-and-filtering-polymorphic-relationships
• how-the-data-is-saved
• useformfields
• depth

[rancid drum]

checkout afterRead hook here https://payloadcms.com/docs/hooks/collections#afterread

[wise mica]

Good point 👍
I'll give it a try 😄

[wise mica]

@rancid drum thx, worked as expected

[celest cargo]

Payload Bot

Thread Solved!

Glad your issue was resolved! :tada: If you want to help make payload better, please give us a :star: on GitHub and review us - It helps us a lot.

🌟 Star Us on GitHub

Click here to star us on GitHub

👍 Review Us

Click here to review us on G2

[rancid drum]

how did you do could you share some dummy code

[wise mica]

@rancid drum I'll share it as I finished it.
Had some correlation with other data/fields

[fair shale]

@rancid drum Here's an example. If you don't want the field data to show at all in the response. set it to undefined like doc.apiKey = undefined. https://github.com/payloadcms/payload/discussions/4400#discussioncomment-8547663

[rancid drum]

i wanted to hide data from the res rather than the actual db

[fair shale]

That is what this does.