Update admin-api.rst

2024-01-03 10:48:48 -05:00
parent 8e122d1a61
commit d66e790df1
1 changed files with 9 additions and 0 deletions
@@ -14,6 +14,15 @@ The API is enabled with the following server configuration:
    server:
        admin: true # boolean on whether to enable Admin API.

+Access control
+--------------
+
+It should be made clear that authentication and authorization is beyond the responsibility of pygeoapi.  This means that
+if a pygeoapi user enables the Admin API, they must provide access control explicity via another service.
+
+pygeoapi hot reloading in gunicorn
+----------------------------------
+
 For pygeoapi to hot reload the configuration as changes are made, the pygeoapi configuration file must be included as
 demonstrated for a gunicorn deployment of pygeoapi via flask: