{"result":{"depiction_url":null,"edges":{"hasreference":{"objects":[{"created":"2026-10-07T11:13:44Z","object_id":{"id":1797,"is_a":["text","documentation","reference","model"],"name":"doc_model_model_acl","title":"acl","uri":"https:\/\/zotonic.com\/id\/1797"},"seq":1},{"created":"2026-10-07T11:13:44Z","object_id":{"id":2986,"is_a":["text","documentation","developerguide"],"name":"developer_testing_permissions","title":{"_type":"trans","tr":{"en":"Test with different users"}},"uri":"https:\/\/zotonic.com\/id\/2986"},"seq":2}],"predicate":{"id":2774,"is_a":["meta","predicate"],"name":"hasreference","title":{"_type":"trans","tr":{"en":"Documentation reference"}},"uri":"https:\/\/zotonic.com\/id\/hasreference"}},"references":{"objects":[{"created":"2020-05-30T05:47:40Z","object_id":{"id":1279,"is_a":["text","documentation"],"name":"doc_glossary","title":"Glossary","uri":"https:\/\/zotonic.com\/id\/1279"},"seq":1000000},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1855,"is_a":["text","documentation","reference","controller"],"name":"doc_controller_controller_authentication","title":"controller_authentication","uri":"https:\/\/zotonic.com\/id\/1855"},"seq":1000000},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1797,"is_a":["text","documentation","reference","model"],"name":"doc_model_model_acl","title":"acl","uri":"https:\/\/zotonic.com\/id\/1797"},"seq":1000000},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1352,"is_a":["text","documentation","developerguide"],"name":"doc_developerguide_templates","title":{"_type":"trans","tr":{"en":"Create a page layout"}},"uri":"https:\/\/zotonic.com\/id\/1352"},"seq":1000000},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1534,"is_a":["text","documentation","reference","controller"],"name":"doc_controller_controller_page","title":"controller_page","uri":"https:\/\/zotonic.com\/id\/1534"},"seq":1000000},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1537,"is_a":["text","documentation","reference","controller"],"name":"doc_controller_controller_template","title":"controller_template","uri":"https:\/\/zotonic.com\/id\/1537"},"seq":1000000},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1752,"is_a":["text","documentation","reference","module"],"name":"doc_module_mod_acl_user_groups","title":"mod_acl_user_groups","uri":"https:\/\/zotonic.com\/id\/1752"},"seq":1000000}],"predicate":{"id":332,"is_a":["meta","predicate"],"name":"references","title":{"_type":"trans","tr":{"en":"References"}},"uri":"https:\/\/zotonic.com\/id\/references"}},"relation":{"objects":[{"created":"2026-10-07T11:13:44Z","object_id":{"id":2960,"is_a":["text","documentation","developerguide"],"name":"developer_model_api","title":{"_type":"trans","tr":{"en":"Expose data through a model"}},"uri":"https:\/\/zotonic.com\/id\/2960"},"seq":1},{"created":"2026-10-07T11:13:44Z","object_id":{"id":2986,"is_a":["text","documentation","developerguide"],"name":"developer_testing_permissions","title":{"_type":"trans","tr":{"en":"Test with different users"}},"uri":"https:\/\/zotonic.com\/id\/2986"},"seq":2},{"created":"2026-10-07T11:13:44Z","object_id":{"id":2860,"is_a":["text","documentation","userguide"],"name":"editor_permissions","title":{"_type":"trans","tr":{"en":"What am I allowed to edit?"}},"uri":"https:\/\/zotonic.com\/id\/2860"},"seq":3},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1534,"is_a":["text","documentation","reference","controller"],"name":"doc_controller_controller_page","title":"controller_page","uri":"https:\/\/zotonic.com\/id\/1534"},"seq":4},{"created":"2020-05-30T05:47:40Z","object_id":{"id":1752,"is_a":["text","documentation","reference","module"],"name":"doc_module_mod_acl_user_groups","title":"mod_acl_user_groups","uri":"https:\/\/zotonic.com\/id\/1752"},"seq":5}],"predicate":{"id":303,"is_a":["meta","predicate"],"name":"relation","title":{"_type":"trans","tr":{"nl":"Relatie","en":"Relation"}},"uri":"http:\/\/purl.org\/dc\/terms\/relation"}},"subject":{"objects":[{"created":"2026-10-07T11:13:44Z","object_id":{"id":2554,"is_a":["categorization","keyword","keyword_information_type"],"name":"zotonic_topic_how_to_guide","title":"How-to guide","uri":"https:\/\/zotonic.com\/id\/2554"},"seq":1},{"created":"2026-10-07T11:13:44Z","object_id":{"id":2564,"is_a":["categorization","keyword","keyword_audience"],"name":"zotonic_topic_backend_developer","title":"Backend developer","uri":"https:\/\/zotonic.com\/id\/2564"},"seq":2},{"created":"2026-10-07T11:13:44Z","object_id":{"id":2592,"is_a":["categorization","keyword","keyword_domain"],"name":"zotonic_topic_authorization_and_access_control","title":"Authorization and access control","uri":"https:\/\/zotonic.com\/id\/2592"},"seq":3},{"created":"2026-10-07T11:13:44Z","object_id":{"id":2685,"is_a":["categorization","keyword","keyword_quality"],"name":"zotonic_topic_security","title":"Security","uri":"https:\/\/zotonic.com\/id\/2685"},"seq":4}],"predicate":{"id":308,"is_a":["meta","predicate"],"name":"subject","title":{"_type":"trans","tr":{"en":"Keyword"}},"uri":"http:\/\/purl.org\/dc\/elements\/1.1\/subject"}}},"id":1536,"is_a":["text","documentation","developerguide"],"links":[{"rel":"self","target":"https:\/\/zotonic.com\/.zotonic\/websub\/topic\/1536"},{"rel":"hub","target":"https:\/\/zotonic.com\/.zotonic\/websub"}],"medium":null,"medium_url":null,"name":"doc_developerguide_access_control","page_url":{"en":"https:\/\/zotonic.com\/docs\/1536\/keep-permission-checks-at-the-boundary","x-default":"https:\/\/zotonic.com\/docs\/1536\/keep-permission-checks-at-the-boundary"},"preview_url":null,"resource":{"body":{"_type":"trans","tr":{"en":"<p>Check the resource, action, and module permission that the operation requires. Return a clear error when access is denied. Test as an anonymous visitor, an editor with limited rights, and an administrator.<\/p>\n<p>Avoid replacing the caller&#39;s context with a privileged shell context in application code. If a background task needs elevated access, constrain the operation and authorize its initiation explicitly.<\/p>\n<h2>Test with different users<\/h2>\n<p>Choose roles that exercise the operation&#39;s permission boundary: anonymous visitor, limited editor, and administrator. Use separate browser sessions or an explicit test context for each role.<\/p>\n<p>Test the direct model or endpoint as well as the visible interface. Confirm that denied writes leave the data unchanged and do not reveal private fields in the error response.<\/p>\n<p>Include unpublished resources and resources outside the user&#39;s content group where relevant. Record the role and resource used in the test so someone else can reproduce the result.<\/p>"}},"category_id":{"id":317,"is_a":["meta","category"],"name":"developerguide","title":"Developer guide","uri":"https:\/\/zotonic.com\/id\/developerguide"},"content_group_id":{"id":339,"is_a":["meta","content_group"],"name":"default_content_group","title":{"_type":"trans","tr":{"en":"Default Content Group"}},"uri":"https:\/\/zotonic.com\/id\/default_content_group"},"created":"2020-05-30T05:47:25Z","creator_id":{"id":336,"is_a":["person","robot"],"name":"gitbot","title":"Git","uri":"https:\/\/zotonic.com\/id\/336"},"doc_editorial_bundle":true,"doc_editorial_edges":{"hasreference":[1797,2986],"relation":[2860,2960,2986],"subject":[2554,2564,2592,2685]},"github_url":"https:\/\/github.com\/zotonic\/zotonic\/tree\/master\/doc\/developer-guide\/access-control.rst","is_authoritative":true,"is_dependent":false,"is_featured":false,"is_protected":false,"is_published":true,"is_unfindable":false,"language":["en"],"modified":"2026-10-07T20:45:38Z","modifier_id":{"id":1,"is_a":["person"],"name":"administrator","title":"Site Administrator","uri":"https:\/\/zotonic.com\/id\/1"},"name":"doc_developerguide_access_control","pivot_geocode":null,"pivot_location_lat":null,"pivot_location_lng":null,"privacy":0,"publication_end":"9999-06-01T00:00:00Z","publication_start":"2022-02-15T10:01:38Z","slug":"keep-permission-checks-at-the-boundary","summary":{"_type":"trans","tr":{"en":"Use the request context when checking access to data and actions. A hidden button is not an authorization check: callers can invoke a model or endpoint directly."}},"title":{"_type":"trans","tr":{"en":"Keep permission checks at the boundary"}},"title_slug":{"_type":"trans","tr":{"en":"keep-permission-checks-at-the-boundary"}},"tz":"UTC","uri":null,"version":43,"visible_for":0},"uri":"https:\/\/zotonic.com\/id\/1536","uri_template":"https:\/\/zotonic.com\/id\/:id","websub":{"hub":"https:\/\/zotonic.com\/.zotonic\/websub","topic":"https:\/\/zotonic.com\/.zotonic\/websub\/topic\/1536"}},"status":"ok"}