#How can we restrict actions on dashboard while allowing it by API ?

5 messages · Page 1 of 1 (latest)

left kestrel
#

Hello
I have a case where I don't want a collection to be created from the dashboard
but I still want to allow the create via API for the frontend

I cannot find a way for this specific access in the docs

rose laurelBOT
crimson moss
#

Are you using the local api on the front end?

formal ether
#

First restrict it with false as you need, then you can create an endpoint on the collection level, the req.payload.create() will bypass the access. Then just fetch, it from the front just make sure you verify the user if needed.