Best way to reliably restrict/redirect feature (not security) access based on a different db field's (scenario in post)

[Apple]

@mgaussie

it just crashes trying to continuously redirect in a loop

Well, are you aware… the destination page will also run the DB query and redirect again to itself? You don’t want to redirect if you’re already in the destination

The condition must be false if the current route is already the destination you want

Security Restrict Global Restriction on API actions

Yes, that’s the way I do it too! High five I use $_SERVER.PATH_INFO instead of $_SERVER.URL, and I use the .startsWith formatter rather than .contains. I suggest you do the same Set Value pathinfo = {{ $_SERVER.PATH_INFO }} Condition {{ pathinfo.startsWith("/api/admin") }} I actually use an array to store the paths that need to be restricted, and then I use a Repeat step to iterate on each array element (each path that needs to be restricted) and check if it matches the current…