Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Server-defined filters for APIv4 queries #15

Open
bjendres opened this issue Jul 26, 2023 · 0 comments
Open

Server-defined filters for APIv4 queries #15

bjendres opened this issue Jul 26, 2023 · 0 comments
Labels
feature security relevant to data security and/or system integrity

Comments

@bjendres
Copy link
Member

Conceptually, we should consider the frontend not trustworthy, nor the queries it generates. Therefore the backend (this extension) system should allow for

  • additional, backend-added search parameters (like is_deleted=0 or similar)
  • post-query procedural result filters (caution: affects pagination, but was implemented in RemoteTools APIv3 - see e.g. HERE)
@bjendres bjendres added feature security relevant to data security and/or system integrity labels Jul 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
feature security relevant to data security and/or system integrity
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@bjendres