Absent uids are returned if querying via uid function

[pandalive]

@abhijit-kar

If user maliciously fabricates id, they won’t even get any result if id doesn’t exist

You may not really understand the issue. This is the most original description of the issue: The uid has not been created, but it appears in the query’s result list.

Even if the id does not exist, dgraph will still return it.
This causes the problems mentioned above:

@pandalive

1, For applications with type checking, it will crash directly. Because it only returned the id that shouldn’t exist, and lost other required fields.

2, I cannot check whether the data exists based on the id, and if I do so, I will get an incorrect result.
If the node does not have other unique fields, I will not be able to check whether the data exists.

3，In actual business, queries based on id are common, such as /post/{id} , /user/{id} , /user/{id}/{status_id} , etc. Once the correct data cannot be queried based on id, it will result in 404 or other serious errors.
This will cause the application to crash, bring a very bad experience to the user, and even create messy and wrong data.

@abhijit-kar

If I am not following someone, it doesn’t make sense to keep a link to them in follows list.

This makes sense for the author itself, because I still want to know what replies I have written, even if the status has been deleted. This is very common in social applications.

But no matter how many questions you have, what I want to express in the end is:

@pandalive

According to the id query but get the wrong result, this in itself is an unreasonable design.