• Replies 4 replies
  • Subscribers 0 subscribers
  • Views 19 views
  • Users 0 members are here
Options
3sides - Social sharing widget
Related

Allow API access when using terms and conditions

Ryan McDonough
27406

If a user has agreed to the terms and conditions of the website we should be able to send requests on their behalf to the API.

If they haven't agreed the API should respond back with a 4XX response noting that the Terms and Conditions need agreeing to first in the response message.

Parents

  • Imran Aziz is there any way to make this bypass setting more granular? right now it's very broad. it applies to every user and to every REST call. I suggest the following changes:

    1 - Apply the bypass only to site admins and system admins. (perhaps that is a separate bypass setting.) those users would be treated specially. AND/OR

    2 - Apply the bypass only to administrative REST call, like getting site settings, site users, etc. Not related to site content. That will permit site monitoring via REST calls but not allow site content to be accessed when the site restrictions apply.

Reply

  • Imran Aziz is there any way to make this bypass setting more granular? right now it's very broad. it applies to every user and to every REST call. I suggest the following changes:

    1 - Apply the bypass only to site admins and system admins. (perhaps that is a separate bypass setting.) those users would be treated specially. AND/OR

    2 - Apply the bypass only to administrative REST call, like getting site settings, site users, etc. Not related to site content. That will permit site monitoring via REST calls but not allow site content to be accessed when the site restrictions apply.

Children
No Data