- Issue created by @seogow
When a View returns rows with permission checks, a fully populated User object is required. However, when a user accesses the JSON API via an OAuth Bearer token using the Simple OAuth (OAuth2) & OpenID Connect → module, the provided User object is incomplete. Consequently, the response returned is that of a generic authenticated user, not a response based on the specific user's roles and permissions.
The returned JSON will be identical for both users, which is incorrect.
Fully reload the User object after authentication. This should ensure the User object is fully populated and can be used correctly for permission checks.
Active
1.1
Code