Hello,
we are using the Rest-Api Plugin and we want to restrict the access to the /v2/docs/swagger.json
is ist possible to limit the access?
Is it possible to disable the generation of the swagger-documentation and the CRUD operations on entities without removing the plugin?
regards,
Paul
Hello @paul.blak
To manage CRUD operations, you can set up a role with Rest Security scopes and grant rights to specific actions.
Docs: Roles - CUBA Platform. Developer’s Manual
By default, requests /rest/v2/docs/** are allowed to all users without authorization, access restriction is not provided.
Regards,
Nikita
Okay, thank you.