Thomas Threadgold
Thomas Threadgold
At the moment, `PageResource` assumes it is returning an image media object. This should be extended to handle _any_ type of supported media.
Expose an _authenticated_ endpoint, `POST /plugins` which allows an admin to install a new plugin on the site. ### Request Body: Required fields: - `id`: the "plugin name" as per...
Perhaps the UserResource object should not expose fields such as `access` or `state`... unless the request is authenticated for that user, or an admin? We currently always filter out `hashed_password`...
Requests must provide valid authentication details for the `user` information they are attempting to update. For example, Alice should not be able to edit details about Bob.
Only authenticated users with valid `admin` privileges should be able to change a user's access rights.
At the moment, you can make a `PATCH` or `POST` request and set a page to use a non-existent page template. This would cause a twig rendering error and break...
I think it would be nice if there could be an option to include/exclude the current page on the breadcrumb trail, similar to how you can optionally include home. (I'll...