From 52c3d4df6024bc0366e50c39f75d1beeb8dca5e6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89mile=20R=C3=A9?= <emile@probo.com>
Date: Thu, 30 Jul 2026 09:33:18 +0200
Subject: [PATCH] Limit NDA gate to document loads
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-in users should browse the compliance portal the
same way visitors do. Keep @nda on export and access
mutations so signatures are only required when loading a
document.

Signed-off-by: Émile Ré <emile@probo.com>
---
 .../v1/graphql/compliance_portal.graphql      | 34 +++++++++----------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/pkg/server/api/complianceportal/v1/graphql/compliance_portal.graphql b/pkg/server/api/complianceportal/v1/graphql/compliance_portal.graphql
index a4f1855e5..2beb7562e 100644
--- a/pkg/server/api/complianceportal/v1/graphql/compliance_portal.graphql
+++ b/pkg/server/api/complianceportal/v1/graphql/compliance_portal.graphql
@@ -121,7 +121,7 @@ input CompliancePortalVisibilityFilter {
   visibility: CompliancePortalVisibility
 }
 
-type Document implements Node @nda {
+type Document implements Node {
   id: ID!
   title: String!
   documentType: DocumentType!
@@ -130,24 +130,24 @@ type Document implements Node @nda {
   access: DocumentAccess @goField(forceResolver: true)
 }
 
-type DocumentConnection @nda {
+type DocumentConnection {
   edges: [DocumentEdge!]!
   pageInfo: PageInfo!
 }
 
-type DocumentEdge @nda {
+type DocumentEdge {
   cursor: CursorKey!
   node: Document!
 }
 
-type Framework implements Node @nda {
+type Framework implements Node {
   id: ID!
   name: String!
   lightLogo: File @goField(forceResolver: true)
   darkLogo: File @goField(forceResolver: true)
 }
 
-type AuditReport implements Node @nda {
+type AuditReport implements Node {
   id: ID!
   fileName: String!
   alias: String @goField(forceResolver: true)
@@ -155,19 +155,19 @@ type AuditReport implements Node @nda {
   access: DocumentAccess @goField(forceResolver: true)
 }
 
-type Audit implements Node @nda {
+type Audit implements Node {
   id: ID!
   name: String
   framework: Framework! @goField(forceResolver: true)
   reportFile: AuditReport @goField(forceResolver: true)
 }
 
-type AuditConnection @nda {
+type AuditConnection {
   edges: [AuditEdge!]!
   pageInfo: PageInfo!
 }
 
-type AuditEdge @nda {
+type AuditEdge {
   cursor: CursorKey!
   node: Audit!
 }
@@ -261,7 +261,7 @@ enum SubprocessorCategory
     )
 }
 
-type Subprocessor implements Node @nda {
+type Subprocessor implements Node {
   id: ID!
   name: String!
   description: String
@@ -280,18 +280,18 @@ input SubprocessorFilter {
 type SubprocessorConnection
   @goModel(
     model: "go.probo.inc/probo/pkg/server/api/complianceportal/v1/types.SubprocessorConnection"
-  ) @nda {
+  ) {
   edges: [SubprocessorEdge!]!
   pageInfo: PageInfo!
   totalCount: Int! @goField(forceResolver: true)
 }
 
-type SubprocessorEdge @nda {
+type SubprocessorEdge {
   cursor: CursorKey!
   node: Subprocessor!
 }
 
-type CompliancePortalReference implements Node @nda {
+type CompliancePortalReference implements Node {
   id: ID!
   name: String!
   description: String
@@ -299,12 +299,12 @@ type CompliancePortalReference implements Node @nda {
   logo: File! @goField(forceResolver: true)
 }
 
-type CompliancePortalReferenceConnection @nda {
+type CompliancePortalReferenceConnection {
   edges: [CompliancePortalReferenceEdge!]!
   pageInfo: PageInfo!
 }
 
-type CompliancePortalReferenceEdge @nda {
+type CompliancePortalReferenceEdge {
   cursor: CursorKey!
   node: CompliancePortalReference!
 }
@@ -394,7 +394,7 @@ type CompliancePortalCommitmentEdge {
   node: CompliancePortalCommitment!
 }
 
-type CompliancePortalFile implements Node @nda {
+type CompliancePortalFile implements Node {
   id: ID!
   name: String!
   category: String!
@@ -403,12 +403,12 @@ type CompliancePortalFile implements Node @nda {
   access: DocumentAccess @goField(forceResolver: true)
 }
 
-type CompliancePortalFileConnection @nda {
+type CompliancePortalFileConnection {
   edges: [CompliancePortalFileEdge!]!
   pageInfo: PageInfo!
 }
 
-type CompliancePortalFileEdge @nda {
+type CompliancePortalFileEdge {
   cursor: CursorKey!
   node: CompliancePortalFile!
 }