Access Control Checks

The portal does not allow you to set permissions for attribute definitions. Therefore the Remote PUMA SPI REST Service allows requests to some operations only for authenticated users.

The portal Remote PUMA SPI REST Service allows requests to the following operations only for authenticated users by using the /um/secure path element:

• /um/attributes/users

• /um/attributes/users/attribute name

• /um/attributes/groups

• /um/attributes/groups/attribute name

For all other operations, the implementation performs permission checks by using the corresponding Portal Access Control (PAC) settings for users and groups.

Parent topic:

Remote PUMA SPI REST Service

Related reference

URL path segment for virtual portals
Identifiers used in the Portal Implementation
Use ATOM/APP as input and output format
Switch for tunneling of HTTP methods
HTTP caching
Context Root and Authentication Mechanism
Lookup Facility in the portal

---