search

DPIclimate / broker

3 stars 3 forks source link

Add read-only mode to REST API #22

Closed dajtxx closed 1 year ago

dajtxx commented 1 year ago

We need a mode where external actors can read data from the REST API but not create/update/delete anything.

The simplest way might be to add a read-only flag to the user table and if that flag is set only allow GET methods to be used.

This is not as flexible as a role-based system with permissions, but will be sufficient for now.

bsefton12 commented 1 year ago

Changes have been merged into master.