Active
Project:
JSON:API Access
Version:
8.x-1.0-beta1
Component:
Code
Priority:
Normal
Category:
Feature request
Assigned:
Reporter:
Created:
13 May 2020 at 05:35 UTC
Updated:
13 May 2020 at 05:35 UTC
Jump to comment: Most recent
For JSON API requests with including only particular fields it requires putting resource name to separate fields per resource, it better to add the same for access check. Example:
/jsonapi/node--article?include=field_tags&jsonapi_access[taxonomy_term--tags]=update,delete
In case if you don't need to check access for some other resources, 'cause it can be performance consuming.
Comments