Update from 4.7.1 to 4.8.2 results in missing parts in the response

[neonnoe]

Bug report

Required System information

• Node.js version: 17.9.1
• NPM version:
• Strapi version: 4.8.2
• Database: affecting both local sqlite and live system with postgres
• Operating system:
• Is your project Javascript or Typescript: JavaScript

Describe the bug

The same query shown in the screenshot results in different responses with missing parts with Strapi 4.8.2

Steps to reproduce the behavior

1. Create a dynamic pageZone
2. Add a content type with a relation to another content type to this page zone
3. In my case: Homepage has a dynamic zone containing a teaser content type, this teaser relates to an article

4. Query the homepage 5. With Strapi 4.8.2 the response is missing the article node in the JSON

Expected behavior

As with the 4.7.1 version, the response should includes the article node.

Screenshots

If applicable, add screenshots to help explain your problem.

Code snippets

HTTP GET Query:
http://localhost:1337/api/home?populate[hero][populate]=*&populate[pageZone][populate]=*&locale=de

[strapi-bot]

This issue has been mentioned on Strapi Community Forum. There might be relevant details there:

https://forum.strapi.io/t/4-7-to-4-8-migration-issues/26667/3

[Convly]

Hello and thank you for raising this issue.

In order to reproduce it, could you tell me a bit more about what kind of attribute is pageZone on your homepage? Is it a relation to a content type? A dynamic zone with its component?
If possible it would be awesome to have the declaration of the attributes for this specific chain of fields.

Thanks!

[neonnoe]

homepage is a single type, it includes the pageZone which is a Dynamic Zone. Within the Dynamic Zone there is an article teaser which is a component. The article teaser component has a reference to an article. The article is a collection type. I hope this helps to reproduce the scenario.

[Convly]

Thanks a lot, I'll try to reproduce it and keep you updated.

[Convly]

It seems like it's working on my side, do you have customized endpoints for your homepage? Do you have the right permissions set?

The data structure

The API results

The config

[neonnoe]

I found the reason why the data was missing in the response. By accident, I was setting the field to private.

It seems that earlier versions of strapi ignored this property and included the field in the response. With the latest version, the data will be ignored when it has the private property.

[derrickmehaffy]

Indeed, this was one of the things covered by the security fix. I'll go ahead and close this out but if you do need that field you can remove the private option.