[wp-trac] [WordPress Trac] #49858: REST API exposed user data

WordPress Trac noreply at wordpress.org
Thu Apr 9 14:34:46 UTC 2020


#49858: REST API exposed user data
--------------------------------------+-------------------------
 Reporter:  vinit86                   |       Owner:  (none)
     Type:  defect (bug)              |      Status:  closed
 Priority:  normal                    |   Milestone:
Component:  General                   |     Version:
 Severity:  normal                    |  Resolution:  worksforme
 Keywords:  has-privacy-review close  |     Focuses:  rest-api
--------------------------------------+-------------------------
Changes (by carike):

 * version:  4.7 =>
 * component:  REST API => General


Comment:

 Hallo there, @vinit86

 This issue has been debated on Slack before :)

 If you are, for example, running a private membership site, where you do
 not want any information about your users displayed publicly, please post
 a question here:
 https://wordpress.org/support/forum/how-to-and-troubleshooting/
 There are several possible solutions to your concerns, but a Trac ticket
 is not the appropriate place to discuss them.
 I am sure that the forum volunteers would be willing to discuss some of
 your options with you.

 The good news is that the REST API team is working on a native basic
 authorization mechanism (so within core), but that is not ready yet.

 All the best.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/49858#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list