tree f6b7a727231d7e9a97907cfa2dcf8960e15103d0
parent b218b4619502f75c452f794ab5ea1507656d4e81
author Edwin Kempin <ekempin@google.com> 1554383735 +0200
committer Edwin Kempin <ekempin@google.com> 1554878859 +0200

PostCheck: Do permission checks first, then validate the input

This is the order that we follow in most REST endpoints.

Signed-off-by: Edwin Kempin <ekempin@google.com>
Change-Id: Ibf56826edcba55747e655f9ddbd05fec3a62b677
Signed-off-by: Edwin Kempin <ekempin@google.com>