Skip to content
This repository has been archived by the owner on Sep 16, 2021. It is now read-only.

resource rest bundle #813

Open
dbu opened this issue Feb 1, 2017 · 0 comments
Open

resource rest bundle #813

dbu opened this issue Feb 1, 2017 · 0 comments
Milestone

Comments

@dbu
Copy link
Member

dbu commented Feb 1, 2017

document the resource rest bundle.

security configuration in resource rest bundle:
the big difference is whitelisting vs blacklisting. The default Symfony security works using blacklisting, while this bundle's security works using whitelisting.

Security is extremely important for this bundle: If not configured correctly, people will have access to the complete CR backend and all data that's stored inside it. That's why I think it's extremely important to not allow any access by default, forcing the developer to think correctly about what and who to allow accessing the API.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants