Manual:Hooks/ApiCheckCanExecute

Details
Called during. Use to further authenticate and authorize API clients before executing the module. Return false and set a message to cancel the request.


 * $module: Module object
 * $user: Current user
 * &$message: API usage message to die with. Since 1.27, it is preferred to use an ApiMessage object here. A string or array is currently passed to, but this is planned to change in 1.29.