RESTful web services Read-Only

Component ID

2282849

Component name

RESTful web services Read-Only

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Component created

Component changed

Component body

Disables all non-read operations via RESTws. All non-read requests will return
an "403 Forbidden".

Note that the RestWS-module is secure by default in that it respects all
existing access checks on entities and resources, and protects against CSRF.
This module is only useful if you

  1. want to prevent updates through REST for users that are otherwise authorized
    to perform those updates (for example to prevent usage of authorized bots), or
  2. are paranoid and prefer to have an additional layer of security.

Incompatibilities

This module might be incompatible with any module for which all three of the
conditions below are true:

  1. implements hook_restws_resource_info_alter(), AND;
  2. has a higher module weight than this module (i.e. runs after this module), AND;
  3. replaces the RestWS Resource Controller class that was defined through
    hook_restws_resource_info().