How can I return a 403 in the on demand actions of backand if the user is not allowed to execute the action?
How to secure backand (back&) on demand action
116 views Asked by user1127860 At
1
How can I return a 403 in the on demand actions of backand if the user is not allowed to execute the action?
Back& security is based on Roles, Back& security templates lets you decide which role(Admin, user, ReadOnly....) can do what(Create Read Update and Delete) and to which object. Because the action is a "child" of an object then any modification you are doing to the object security effects the access to its actions.