422 UNPROCESSABLE ENTITY when using user_id and data_relation on PATCH

[xibriz]

Expected Behavior: 200 OK

Actual Behavior: 422 UNPROCESSABLE ENTITY

If using set_request_auth_value on a schema and having defined a data_relation to a schema that is not using any auth value,
a PATCH operation will fail with the follwoing error:

value 'XXX' must exist in resource 'YYY', field '_id'

POST works fine.

The only workaround is not to define any data_relation.

According to my research, the _filter variable contains the user_id in an $and condition when PATCH but not on POST.

eve/eve/io/mongo/mongo.py

Line 335 in c629419

datasource, filter_, projection, _ = self._datasource_ex(

Environment

• Python version: 3.8.10
• Eve version: 1.1.5

[ljluestc]

from eve import Eve

app = Eve()

Define the schemas

schema_with_auth = {
'author': {
'type': 'objectid',
'data_relation': {
'resource': 'users',
'field': '_id',
'embeddable': True,
}
}
}

schema_without_auth = {
'name': {
'type': 'string',
}
}

Apply the schemas to appropriate resources

app.config['DOMAIN'] = {
'articles': {
'schema': schema_with_auth,
'resource_methods': ['GET', 'POST', 'PATCH'],
'item_methods': ['GET', 'PATCH'],
},
'users': {
'schema': schema_without_auth,
'resource_methods': ['GET', 'POST'],
'item_methods': ['GET'],
},
}

Patch request will fail without this workaround

def fix_patch_request(resource, request, lookup):
if request.method == 'PATCH':
app.auth.set_request_auth_value(resource, request, lookup)

app.on_pre_PATCH += fix_patch_request

if name == 'main':
app.run()