kdb-bot/src/bot_graphql/abc/query_abc.py

@@ -52,9 +52,9 @@ class QueryABC(ObjectType):
             if user == "system" or user.auth_role == AuthRoleEnum.admin:
                 return self._resolve_collection(collection, *args, **kwargs)
 
-            for x in collection:
+            for x in collection.to_list():
                 if not self._can_user_see_element(user, x):
-                    return List()
+                    collection.remove(x)
 
             return self._resolve_collection(collection, *args, **kwargs)