Skip to content

docs: declare a permission on every REST route in the examples - #28

Merged
ogorzalka merged 1 commit into
mainfrom
docs/rest-routes-explicit-permission
Oct 26, 2026
Merged

ogorzalka merged 1 commit into
mainfrom
docs/rest-routes-explicit-permission

Conversation

@ogorzalka

Copy link
Copy Markdown
Member

pollora/wp-rest 0.2.0 deprecates a route without a permission (still public, with a _doing_it_wrong notice; refused in the next major). The pollora-rest-api skill and the core guidelines taught the unsafe form, so agents would generate it. The examples now use Everyone, IsLoggedIn and IsAdmin, and the skill says to always declare a permission. Suite: 86 passed.

@ogorzalka
ogorzalka force-pushed the docs/rest-routes-explicit-permission branch from 440d308 to e3c9b7a Compare October 26, 2026 11:29
@ogorzalka
ogorzalka merged commit 6df7c76 into main Oct 26, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant