Allow uid access (#4922)

edgraph/access_ee.go

@@ -677,7 +677,7 @@ func parsePredsFromQuery(gqls []*gql.GraphQuery) []string {
 		if gq.Func != nil {
 			predsMap[gq.Func.Attr] = struct{}{}
 		}
-		if len(gq.Attr) > 0 {
+		if len(gq.Attr) > 0 && gq.Attr != "uid" {
 			predsMap[gq.Attr] = struct{}{}
 		}
 		for _, ord := range gq.Order {

ee/acl/acl_test.go

@@ -680,7 +680,30 @@ func TestQueryRemoveUnauthorizedPred(t *testing.T) {
 		t.Run(tc.description, func(t *testing.T) {
 			resp, err := userClient.NewTxn().Query(ctx, tc.input)
 			require.Nil(t, err)
-			require.Equal(t, tc.output, string(resp.Json))
+			testutil.CompareJSON(t, tc.output, string(resp.Json))
 		})
 	}
+
+	require.NoError(t, testutil.AssignUids(101))
+	mutation = &api.Mutation{
+		SetNquads: []byte(`
+			<100> <name> "100th User" .
+			<100> <age> "100" .
+		`),
+		CommitNow: true,
+	}
+	_, err = dg.NewTxn().Mutate(ctx, mutation)
+	require.NoError(t, err)
+	uidQuery := `
+	{
+		me(func: uid(100)) {
+			uid
+			name
+			age
+		}
+	}
+	`
+	resp, err := userClient.NewReadOnlyTxn().Query(ctx, uidQuery)
+	require.Nil(t, err)
+	testutil.CompareJSON(t, `{"me":[{"name":"100th User", "uid": "0x64"}]}`, string(resp.GetJson()))
 }