search

mcab / hiber

API for Bat House SDP
GNU General Public License v3.0
0 stars 1 forks source link

Proper permission scope on API endpoints #32

Open mcab opened 5 years ago

mcab commented 5 years ago

We have data currently working, but currently, it only checks if the user is authenticated. If so, it will show all the data for that endpoint.

This cannot be shown during MVP.

mcab commented 5 years ago

Resources:

We'll probably need to write a custom object level permission.