I have been reading through this article:
I'd like to increase the security of my website in as many ways possible, one such way being limiting the permission scope of backend functions.
One aspect of the article that remains unclear to me, which I would appreciate clarification around, is the following:
If I call a function residing in one backend module (say module A) from another different backend module (B), and the permission on A is restricted to admin, does that allow the function to be successfully executed when called in module B? Or to do this, would I need to add options to the function call?
What does the ‘admin’ permission actually mean?
Thanks in advance!