Closed
Description
Description / Steps to reproduce / Feature proposal
Based on loopbackio/loopback4-example-shopping#12 (comment)
I am proposing we eventually add support to our existing relational controllers for manipulating individual related models.
Ex:
/users/{userId}/orders/{orderId}
So this in its current form is not all that helpful as one would argue being able to directly manipulate the model using /orders/{orderId}
as we don't have referential integrity (#1718) yet ... but once we do, this can help ensure that only users with access to an order are the ones manipulating it.
This could also just be solved using authorization and may not be needed.
The purpose of this issue is to drive a discussion to figure out if this is needed or not.