By default restws does view permission checks on responses.

However this adds about 50% of work on large entities so it would be great to disable permission checks for when performance is more applicable and the service is on a private network.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

JoeMcGuire created an issue. See original summary.

JoeMcGuire’s picture

Attached is a patch which does this globally.

Ideally something could be setup a bit more fine grain but I'm unsure what that design would look like yet. Other todo's include Admin UI and uninstall hook cleanup.

For now anyone testing the patch would need to set the variable restws_access_check = FALSE; as it defaults to existing behaviour of TRUE to do access checks.