Unrestricted Exposure of User Data Through the User Query

[krishna619]

Describe the bug
The affected query is User($id: ID!) which fetches detailed information about a user based on the user ID provided. The current implementation does not restrict users from querying information about others, which violates common privacy principles and data access controls.

query User($id: ID!) {
    user(id: $id) {
        user {
            _id
            joinedOrganizations {
                _id
            }
            phone {
                mobile
            }
            address {
                line1
                countryCode
                city
                state
            }
        }
        appUserProfile {
            _id
            adminFor {
                _id
            }
        }
    }
}

Potential internship candidates
Please read this if you are planning to apply for a Palisadoes Foundation internship PalisadoesFoundation/talawa#359

[github-actions]

This issue did not get any activity in the past 10 days and will be closed in 180 days if no update occurs. Please check if the develop branch has fixed it and report again or close the issue.

[AdityaRaimec22]

@palisadoes can I get assigned to the issue.

[github-actions]

This issue did not get any activity in the past 10 days and will be closed in 180 days if no update occurs. Please check if the develop branch has fixed it and report again or close the issue.

[palisadoes]

Unassigning. Inactivity

[rohansen856]

@palisadoes i would like to work on this issue. please assign me this issue. thank you.

[nitintwt]

@palisadoes @Cioppolo14 Can you please assign this issue to me. Already resolved the issue locally and wanted to make a PR. Thank you

[palisadoes]

@nitintwt I've assigned it to you

[github-actions]

This issue did not get any activity in the past 10 days and will be closed in 180 days if no update occurs. Please check if the develop branch has fixed it and report again or close the issue.

[github-actions]

This issue did not get any activity in the past 10 days and will be closed in 180 days if no update occurs. Please check if the develop branch has fixed it and report again or close the issue.

[palisadoes]

unassigning. Inactivity

[Suyash878]

I would like to work on this.

[Cioppolo14]

@Suyash878 Our policy is to assign no more than two issues to each contributor across all repositories. This way everyone gets a chance to participate in the projects. We sometimes give exceptions for more urgent cases and sometimes we lose track, but the policy stands. You have reached your limit, please wait until your existing issues are closed before requesting more issues. You could unassign yourself from one of the other issues too.

[Suyash878]

@Cioppolo14 I have unassigned myself from this issue.