Portal, V6.1
Access Control Checks
The portal does not allow you to set permissions for attribute definitions. Therefore the Remote PUMA SPI REST Service allows requests to some operations only for authenticated users. The portal Remote PUMA SPI REST Service allows requests to the following operations only for authenticated users by using the /um/secure path element:
- /um/attributes/users
- /um/attributes/users/attribute name
- /um/attributes/groups
- /um/attributes/groups/attribute name
For all other operations, the implementation performs permission checks by using the corresponding Portal Access Control (PAC) settings for users and groups.
Parent topic
How the portal implements the Remote PUMA SPI REST Service
Related reference
URL path segment for virtual portals
Identifiers used in the Portal Implementation
Use ATOM/APP as input and output format
Switch for tunneling of HTTP methods
HTTP caching
Context Root and Authentication Mechanism
Lookup Facility in the portal