Access Control Checks

The portal does not allow us to set permissions for attribute definitions. Therefore the remote REST service for PUMA allows requests to some operations only for authenticated users.

The portal remote REST service for PUMA allows requests to the following operations only for authenticated users using the /um/secure path element:

• /um/attributes/users

• /um/attributes/users/attribute name

• /um/attributes/groups

• /um/attributes/groups/attribute name

For all other operations, the implementation performs permission checks using the corresponding Portal Access Control (PAC) settings for users and groups.

Parent: How the portal implements the remote PUMA REST service
Related:
URL path segment for virtual portals
Identifiers used in the Portal Implementation
Use ATOM/APP as input and output format
Switch for tunneling of HTTP methods
HTTP caching
Context root and authentication mechanism
Lookup facility in the portal