By jrockowitz on
Change record status:
Published (View all published change records)
Project:
Introduced in branch:
8.x-5.x
Introduced in version:
8.x-5.0-rc25
Issue links:
Description:
Access to webform configuration via REST or JSON API now has dedicated permissions and access rules.
The REST and JSON API discloses all configuration related to a webform this includes more than just the elements and will settings and handlers which may include private email addresses.
Screenshots
Access own or any webform configuration permission
Access webform configuration access rule
Impacts:
Site builders, administrators, editors
Module developers
