File tree Expand file tree Collapse file tree 1 file changed +3
-1
lines changed Expand file tree Collapse file tree 1 file changed +3
-1
lines changed Original file line number Diff line number Diff line change @@ -364,7 +364,9 @@ Let's consider an authorization scenario for which we are required to implement
364
364
* The author of article `Old Article ` is person `Alice `.
365
365
* The author of article `New Article ` is person `Bob `.
366
366
367
- Now let 's consider an API user that tries to update `New Article ` by setting its author to `Alice `. First to all , we wish to authorize this operation by the verifying permissions related to the resources that are ** explicity affected ** by it :
367
+ Now let 's consider an API user that tries to update `New Article ` by setting its author to `Alice `. The request would look something like `PATCH /articles /{NewArticleId }` with a body containing a reference to `Alice `.
368
+
369
+ First to all , we wish to authorize this operation by the verifying permissions related to the resources that are ** explicity affected ** by it :
368
370
1 . Is the API user allowed to update `New Article `?
369
371
2 . Is the API user allowed to update `Alice `?
370
372
You can’t perform that action at this time.
0 commit comments