search

benetech / Imageshare

MIT License
0 stars 0 forks source link

Don't expose unpublished resources via resource API endpoint #262

Closed jkva closed 3 years ago

jkva commented 3 years ago

As remarked by @johnhbenetech :

While unpublished resources don’t appear in the filter results, they are reachable by directly hitting the ID. Charles, this is more of a question for you – should we expose unpublished things? The IDs are incremented so are easily guessable.

clapierre commented 3 years ago

Unpublished items if guessed by their IDs should not be shown.

jkva commented 3 years ago

@clapierre I expected as much, hence the presumptuous issue title ;)

jkva commented 3 years ago

Addressed via 0f47461d28c87f4bfd381a385174b2ef974e1da6