raimohanska
commented
3 years ago - Now that an accesspolicy can allow public read/write, we cannot deny API access based on the existence of a policy
- Check for public read/write access in case of no API_KEY header
- A valid API_KEY header matching the boards API key grants unrestricted access