kdb-bot/src/bot_graphql/abc/query_abc.py

@@ -55,9 +55,9 @@ class QueryABC(ObjectType):
             if user == "system" or user.auth_role == AuthRoleEnum.admin:
                 return self._resolve_collection(collection, *args, **kwargs)
 
-            for x in collection.to_list():
+            for x in collection:
                 if not self._can_user_see_element(user, x):
-                    collection.remove(x)
+                    return List()
 
             return self._resolve_collection(collection, *args, **kwargs)