Merge pull request #2917 from DFE-Digital/CPDLP-1913

[CPDLP-1913] Restrict participants endpoint fields
DFE-Digital · Jan 22, 2023 · 32af71f · 32af71f
2 parents 8eaba67 + 83347f3
commit 32af71f
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/app/services/api/v1/ecf/participants_query.rb b/app/services/api/v1/ecf/participants_query.rb
@@ -24,7 +24,19 @@ def induction_records
                      },
                    )
 
+          necessary_fields = %i[
+            induction_programme_id
+            induction_status
+            mentor_profile_id
+            participant_profile_id
+            preferred_identity_id
+            schedule_id
+            training_status
+            updated_at
+          ]
+
           scope = InductionRecord
+                    .select(*necessary_fields)
                     .references(participant_profile: %i[participant_identity])
                     .includes(
                       :preferred_identity,