Do not allow changing specific information

I have a collection type called ‘Stores’ and inside it, I have a “active” boolean, that I’ll change it to “on” when the payment is confirmed, so the user can configure his store.

So my question is, how to now allow the user to make a PUT request and change this active boolean?

Hi there @champS if i understand your issue correctly, you want them to change the “active” boolean to true or false with a put request ?

so make a PUT request to /stores with the payload inside of it

{
"active": true
}

That should set it to true. If you want to deny anyone from changing it you can always extend the controller and remove it if it exists if you do NOT want them to be able to change it ?