how can we restrict metadata in DX API?
The metadata is controlled or restricted to the fields defined in AllowedStartingFields Data transform. Please find the below link for more details
2 Likes
You may also be interested in Security of Constellation applications
In my opinion,
Metadata comes from the UI layer, so controlling the view is the key
What might help is:
-
Control it via View configuration (only include required fields)
-
Use field-level security (roles/privileges)
-
Or expose a custom API if you need stricter control
1 Like
What kind of metadata you mean? If you don’t use DX part of API and interested only in data part you can restrict uiResource being returned on response.