Skip to main content

Mark read or unread

PATCH 
/admin/notifications/:id

No permission check — ownership is the authorization, and it is enforced in the update's own WHERE clause rather than by a comparison this route could skip. Someone else's notification is indistinguishable from one that does not exist: both are a 404.

Request​

Responses​

Marked