14.6 Enforcing Business Logic in REST APIs

Apply the same business rules to REST API changes that your APEX pages use.

If you let an outside system change your application data, you must apply the same validation and defaulting business logic used in your web user interface to keep bad data out of your system of record.