Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users
All objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If object-urls are exposed via other channels, the contents of these objects can be viewed independent of object-management configurations.