OZ-689 - Added note to the readme file that proxy should only be used…

… when the client is authenticated

README.md

@@ -21,8 +21,12 @@ password=test-password
 
 `password`: The password to authenticate to the external FHIR API
 #### Global Properties
-`fhirproxy.charge.item.definition.privileges`: Comma separated list of privileges required to manage charge item definition FHIR resource, when the
-            external API is enabled
+`fhirproxy.charge.item.definition.privileges`: Comma separated list of privileges required to manage charge item 
+definition FHIR resource, when the  external API is enabled
 
-`fhirproxy.inventory.item.privileges`: Comma separated list of privileges required to manage item inventory FHIR resource when the
-            external API is enabled
+`fhirproxy.inventory.item.privileges`: Comma separated list of privileges required to manage item inventory FHIR 
+resource when the external API is enabled
+#### NOTE
+It is assumed that the external API exposed by proxy can only be consumed by a client already authenticated. If one 
+would want to query those resources using basic auth, it is advised to query directly the Odoo FHIR API service, not 
+through the FHIR proxy module.