🐛 [Bug] Comment mutations allow `deleted`, `disabled` flags as input param

Created by: Tirokk

Authored by roschaefer Sep 3, 2019 Closed Sep 16, 2019

---

🐛 Bugreport

From @alina-beck's comment here: https://github.com/Human-Connection/Human-Connection/pull/1440#discussion_r320329116

The CreateComment and UpdateComment have read-only attributes exposed as input param. We shouldn't use neo4j-graphql-jsfor the mutations for that very reason.

Steps to reproduce the behavior

1. yarn run dev in the backend
2. Visit http://localhost:4000/
3. Type mutation { CreateComment() { content } }
4. Click into the parantheses and hit Ctrl+Space
5. See e.g. deleted as a suggestion

Expected behavior

Read-only attributes should show up nowhere as input params.