OH3 will list all your things even if you are not logged in

[CrazyIvan359 (Michael Murton)]

@Dejan

Try this: Settings → API Security → Show advanced and disable “Implicit user role for unauthenticated requests” does it fix your issue?

You won’t want to do this. I learned the hard way that it will break all SSE subscribers not providing authentication. That means none of the UI’s will show item states. See here for reference:

[Solved] OH3 New UI not displaying item states

Yes this option is experimental and could break things currently. It shouldn’t be used except in very special circumstances! The (long-standing) issue is that there’s no option to pass headers when opening a EventSource: But I know about the problem, there’s a polyfill library that could be used to add support - I have used it in HABot actually.