Replies: 1 comment
-
Hi @IRediTOTO , the API permission is another mechanism to protect your API resource. You can use API resource & API permission to handle organization-agnostic API requests. You can refer to this tutorial to see the usage of |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I have created an Org template in Logto.io
I have created 2 org roles:
ADMIN
,USER
There are 2 org permissions:
category:read
,category:edit
I have created an API resource with id:
http://localhost:3001
with permissions:manage:all
I wonder if I really need API resource when I already have org template?
For example, when a user calls api:
/category/edit
, the permissioncategory:edit
is requiredisn't that enough? What do I need API permission for?
Beta Was this translation helpful? Give feedback.
All reactions