Hey Xano team, amazing release ! I am currently benchmarking the new patch function compared to the method previously provided by Guillaume Maison on the community, it looks very promising.
One thing I find missing would be the ability to select which fields can be patched with the new patch function.
For example, I am using it to update form answers from a multi step form, so my frontend is making a request everytime a field is answered.
It works great but brings a security issue as if somehow my users were to find the database schema, they could easily send a request with an input object containing other fields that should not be modified by public users.
For example each form record is linked to a company record (which is defined at the creation of the form), the new patch function could allow public user to send a input such as {"company_id: xx} and they would be able to change the company assignement.
Let me know if you think that would make sense to implement as part of the patch function or if there is an easy workaround for that usecase
Keep up the amazing work,
Have a great weekend 😉