Mathias Leimgruber

In this case it basically loads the structure of the website 😅 (In my case 250k items) IMHO the issues is here. https://github.com/plone/plone.restapi/blob/df3dba9b2eff44dc6349175ffdd9e97157ac58a9/src/plone/restapi/serializer/dxcontent.py#L149-L157 If the kwarg `include_items` is False, but...

Support 'not' queries with @search endpoint.

6

This PR adds support to exclude certain items from the result set using `not` for DateIndex, FieldIndex and KeywordIndex. Example request: ``` GET /Plone/@search?Subject.not=important&path.query=%2FPlone&path.depth=-1 HTTP/1.1 ``` Returns all items not...

Do not expose private metadata via relationfield serializer.

11

Fixes #1634 This PR implements two changes: 1. Only return summary if the user has `View` permission on target object. 2. Filter `None` values in RelationListFieldSerializer, which result from not...

Do not expose information via relationfield serializer

2

**Description** The relationfield serializer should respect the `View` permission. **Problem** Some metadata like, Title and Description can be exposed thru the relationsfield serializer **Reproduce** 1. Create 3 pages 2. Refer...