Workflow variables exposed in workflow schema

[jmoenich1]

When running the Get Workflow Schema operation for a selected workflow through the swagger UI, the JSON schema definition includes all variable defined within the workflow.  This, in effect, gives anyone who calls the workflow API the ability to send those data points.  Is there any way to define what variables should be available in the definition as well as which are mandatory and which are optional?  Cannot see a way to define this from the workflow.

[#2]

Hello,

I do not think there is a way to put security on the API side of things in regard to Workflow Variables. However, this seems like good functionality to be added to the product and I recommend logging this as an Idea on Ideas.K2.com.