Forum Discussion

madrian's avatar
madrian
Guide
11 years ago

Board visibility privileges in custom component

Hello Community!   We are using a custom component to display Boards, Nested Boards and Blogs on our homepage and the boards' visibilities seem to be screwed up.   Some of these boards have a cus...
  • Tyson's avatar
    Tyson
    11 years ago

    Not sure if this helps, but you can check a user's permissions to view a specific board like so:

     

    /boards/id/[your board id]/view/allowed

     

    Cheers,

    Tyson

Tim_h's avatar
Tim_h
Boss
If you make the call with rest instead of restadmin, it just won't retrieve
boards hidden to that user.

Security wise I'd definitely advise against using restadmin in almost every
case.
Better to catch failures in code than to let unintended users execute code
or retrieve data.

Excellent point about the "hidden" status being available via rest though!
keshavkelkar's avatar
keshavkelkar
Ace
8 years ago

Tim_h  Yes I agree with you.. Using Rest in place of Restadmin is always good practice. Thanks for appreciation .