Join Field Forbids Default Access Control from Related Collections

[davliang]

Describe the Bug

Related to #9930. Fixed by #9971.

Fetching a document in the admin panel with a join field with default access will result in a doc undefined on the client-side and Forbidden in the console logs on the client side and server side.

Link to the code that reproduces this issue

https://github.com/davliang/payload/tree/issue/join-permissions

Reproduction Steps

1. Run pnpm install to install dependencies
2. Run pnpm dev _community to start the admin panel
3. Go to http://localhost:3000/admin
4. Create a new All Posts (Just click save in the form.)

Which area(s) are affected? (Select all that apply)

area: docs, area: ui

Environment Info

Payload: 3.7.0
Node.js: 22.6.0
Next.js: 15.1.0

[akhrarovsaid]

If I'm not mistaken here I believe this will be fixed by #9971 and the issue was not passing a user while overrideAccess is set to false to prevent users from reading data they technically shouldn't have access to.

[davliang]

If I'm not mistaken here I believe this will be fixed by #9971 and the issue was not passing a user while overrideAccess is set to false to prevent users from reading data they technically shouldn't have access to.

You're right, patching it works correctly now. I should have looked closer at the previous pull requests. Thank you!

[DanRibbens]

Thanks for opening an issue. I caught this one too late yesterday to get it into the release.

I also found that join field e2e tests were not running in CI which would have caught this. Now it is included and passing https://github.com/payloadcms/payload/actions/runs/12330014124/job/34415043646?pr=9971 as expected.

[tyteen4a03]

Can confirm - will have to downgrade to 3.6.0 while this is fixed.

[DanRibbens]

Closing this issue, we'll get it out soon!

[github-actions]

This issue has been automatically locked.
Please open a new issue if this issue persists with any additional detail.