There will probably be documentation added for REST link relations and types, as described in #1925618: Ensure Drupal's web services are self-documenting: Swagger support OR rest_api_doc to Drupal core as an experimental module?. These should be permissioned. As suggested in #4 of that issue, the permission can probably be a simple "Access REST documentation".

Comments

klausi’s picture

Status: Active » Closed (duplicate)

Yep, but adding that permission is just a couple of lines of code and should come with #1925618: Ensure Drupal's web services are self-documenting: Swagger support OR rest_api_doc to Drupal core as an experimental module? in the first place.