Make all APIs restricted by default

[Alexander_Paladines]

I don’t think so, personally I think that more of Wappler users develop Backends, and most of the Wappler functions today help in develop Dashboards, admin panels, etc (Login, backend stuff, etc). With that in mind, most of the API calls should be restricted and not public.

The opposite of what teodor say:

TIP: Server Actions are not restricted by default

The server actions are not restricted by default. There are many cases where the data need to be displayed on the front end and doesn’t need any protection. It’s up to you to restrict the server actions, which are supposed to be used in your admin panel / cms etc. and the ones that are not supposed to serve publicly available data.