projects
/
freeside.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (from parent 1:
c68e248
)
37669 Additional back-office disclaimers
author
Jeremy Davis
<jeremyd@freeside.biz>
Mon, 28 Sep 2015 14:10:05 +0000
(10:10 -0400)
committer
Jeremy Davis
<jeremyd@freeside.biz>
Mon, 28 Sep 2015 14:10:05 +0000
(10:10 -0400)
FS/FS/API.pm
patch
|
blob
|
history
diff --git
a/FS/FS/API.pm
b/FS/FS/API.pm
index
cc5f609
..
d331a9b
100644
(file)
--- a/
FS/FS/API.pm
+++ b/
FS/FS/API.pm
@@
-23,7
+23,9
@@
This module implements a backend API for advanced back-office integration.
In contrast to the self-service API, which authenticates an end-user and offers
functionality to that end user, the backend API performs a simple shared-secret
authentication and offers full, administrator functionality, enabling
In contrast to the self-service API, which authenticates an end-user and offers
functionality to that end user, the backend API performs a simple shared-secret
authentication and offers full, administrator functionality, enabling
-integration with other back-office systems.
+integration with other back-office systems. Only ccess this API from a secure
+network from other backoffice machines. DON'T use this API to create customer
+portal functionality.
If accessing this API remotely with XML-RPC or JSON-RPC, be careful to block
the port by default, only allow access from back-office servers with the same
If accessing this API remotely with XML-RPC or JSON-RPC, be careful to block
the port by default, only allow access from back-office servers with the same