Security

Field-Level Authorization

Field-level authorization is an access control that decides whether a user may read or change an individual property of an object, such as its price, owner or status, after object access has been granted.

Deep dive

Learn Article

What Is Field-Level Authorization in an API?

Field-level authorization checks each property an API user can read or change. Without it, record access can expose prices, owners and order state.

beginner 5 min read

Back to glossary