As per these directions, we should be restricting all fields returned by the server. For now I've made sure there are locks on all sensitive information, but as the guide suggests, it's good practice to restrict everything to avoid accidental publication.
I've broken this out into a separate issue b/c this type of modification is very prone to creating bugs, and I'd like to take time to do this slowly with a round of QA before publication.
As per these directions, we should be restricting all fields returned by the server. For now I've made sure there are locks on all sensitive information, but as the guide suggests, it's good practice to restrict everything to avoid accidental publication.
I've broken this out into a separate issue b/c this type of modification is very prone to creating bugs, and I'd like to take time to do this slowly with a round of QA before publication.