REST API

[Spartak-Belov-Floresku]

Fine, I just found out. I already passed the chapter 6. But, if you will use REST API under login as a usual user, not as a superuser or an employee. The REST works fine, you can change statuses of an order like a superuser. We need to add a some restriction code there. So guys, it is your turn to solve this problem and show this code here :)