Title: Black list function
Last modified: July 29, 2021

---

# Black list function

 *  [Jarko Piironen](https://wordpress.org/support/users/ipajen/)
 * (@ipajen)
 * [4 years, 10 months ago](https://wordpress.org/support/topic/black-list-function/)
 * Plugin information ”Works as a “set it and forget it” install. ”
 * Its a great plugin but i would like to have a blacklist function as i am using
   the plugin only to disable the api for user enumeration in WordPress and would
   like to blacklist this api as for now when new APIs are added by plugins and 
   WordPress I need to manually whitelist them or I am missing something? Thank 
   you

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [Dave McHale](https://wordpress.org/support/users/dmchale/)
 * (@dmchale)
 * [4 years, 10 months ago](https://wordpress.org/support/topic/black-list-function/#post-14715295)
 * Hi [@ipajen](https://wordpress.org/support/users/ipajen/)
 * Unfortunately yes, it works as “set it and forget it” if you use it the way the
   name says… you want to Disable the REST API, period. If you want to customize
   the controls (like ONLY turning off access to the users routes) then the current
   rules default to “disallow” since you need to manually approve only those routes
   you wish to allow.
 * Per the info on the admin page, _NOTE: New routes may be added in the future 
   by plugins, themes, or WordPress itself. If you choose to manage access for a
   user role, you will have to come back and add permissions for any new routes 
   later._
 * An override to this behavior is on my roadmap but unfortunately just not something
   I’ve had time to add yet. I’ll see what I can do to get this in the next release
   though. 🙂 Cheers!
 *  Thread Starter [Jarko Piironen](https://wordpress.org/support/users/ipajen/)
 * (@ipajen)
 * [4 years, 10 months ago](https://wordpress.org/support/topic/black-list-function/#post-14715473)
 * Best would be a blacklist a route but if its easier and possible a notification
   in the WordPress admin panel that new routes has been found could work also as
   a option.
 * Thanks
 *  [Tecca](https://wordpress.org/support/users/tecca/)
 * (@tecca)
 * [4 years, 9 months ago](https://wordpress.org/support/topic/black-list-function/#post-14736520)
 * Agreed, this would be a great way to go about it. Especially since WordPress 
   and plugins in the future will start relying even more heavily on the API being
   accessible.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Black list function’ is closed to new replies.

 * ![](https://ps.w.org/disable-json-api/assets/icon-256x256.png?rev=1001011)
 * [Disable REST API](https://wordpress.org/plugins/disable-json-api/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/disable-json-api/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/disable-json-api/)
 * [Active Topics](https://wordpress.org/support/plugin/disable-json-api/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/disable-json-api/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/disable-json-api/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [Tecca](https://wordpress.org/support/users/tecca/)
 * Last activity: [4 years, 9 months ago](https://wordpress.org/support/topic/black-list-function/#post-14736520)
 * Status: not resolved