This repository has been archived by the owner on Feb 24, 2021. It is now read-only.

Proper permission scope on API endpoints #32

Open

mcab opened this issue Apr 3, 2019 · 1 comment

Owner

mcab commented Apr 3, 2019

We have data currently working, but currently, it only checks if the user is authenticated. If so, it will show all the data for that endpoint.

This cannot be shown during MVP.

mcab changed the title ~~Properly scope API endpoints~~ Proper permission scope on API endpoints

Owner Author

mcab commented Apr 5, 2019

Resources:

We'll probably need to write a custom object level permission.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.