Topic cluster
Backend developer
A programmer who builds Erlang modules models controllers notifications and data behavior.
View topic page3 items
The remaining keywords do not make a useful further split. All matching documentation is listed below.
Keep permission checks at the boundary
Use the request context when checking access to data and actions. A hidden button is not an authorization check: callers can invoke a model or endpoint directly.
Test with different users
Choose roles that exercise the operation's permission boundary: anonymous visitor, limited editor, and administrator. Use separate browser sessions or an explicit test context for each role.
Work with a site context
A context carries the site and request-related state used by Zotonic APIs. Pass it through your functions instead of storing one context globally.