Developer forum

Forum » Development » Area settings publicly accessible via dwapi

Area settings publicly accessible via dwapi

Roald Haahr
Reply

Hi

If I call /dwapi/content/areas I can see all areasettings for a solution without being asked to authorize myself. Sometimes I store information that should not be accessible to anyone other than the backend users in the area settings, so I find it problematic that the area settings are now served like that.

Is there eventually another place I can store site specific information that is not accessible without access to the backend?

Kind regards
Roald


Replies

 
Nicolai Pedersen Dynamicweb Employee
Nicolai Pedersen
Reply
This post has been marked as an answer

Hi Roald

Currently that is not available. You can create a page with the information - one for each language, and then use permissions to remove access. Permissions are respected by the web-api.

Votes for this answer: 1

 

You must be logged in to post in the forum