# Update security settings

`PATCH https://api.cademi.com.br/api/v3/settings/security`

Operation ID: `settings.security.update` · API v3

Updates the content protection settings. Only the fields included in the request are changed: setting a field to `null` clears its configured value and restores the default, and omitted fields are left unchanged.

Provider credentials are write-only. Enabling a video provider requires its credentials.

To avoid overwriting a newer version, send the `ETag` returned by the retrieve operation in the `If-Match` header. The header is optional; when it is omitted, the update is applied to the current revision.

Required permissions: `settings.update_security`.

## Parameters

| Name | In | Type | Required | Description |
|---|---|---|---|---|
| `If-Match` | header | string | no |  |

## Request body

Content type: `application/json`.

Schema: object.

## Responses

### 200

Returns the updated security settings.

Body: `data`: SettingsSecurity.

Fields of SettingsSecurity:

| Field | Type | Required | Description |
|---|---|---|---|
| `defaults` | object | yes |  |
| `drm` | object | yes |  |
| `object` | string, one of `settings` | yes |  |
| `propagation` | object | yes |  |
| `providers` | object | yes |  |
| `replica` | object | yes |  |
| `revision` | string | yes |  |

### 401

The credential is missing, malformed, expired, or revoked.

Body: Error.

### 403

The current credentials do not have the permission required by this operation.

Body: Error.

### 412

The security settings have changed since the supplied revision was retrieved.

Body: Error.

### 422

The request body or query parameters failed validation.

Body: ValidationFailed.

Full schema: https://cademi.dev/openapi/v3.json