immutable_fields

Adds CustomField. A value belongs to one custom field for its whole life, and the request path already names it, so there is nothing for the request body to say. forbidden checks rights on the custom field from the path too, which a value the body pointed elsewhere would sidestep.

resource_exists

A value is only a resource under the custom field that owns it.

← Back to index