Re: REST web service APIs

And then you also have to document your setting for the autitors and if the
data contains
GDPR data what went in and out of the service and to whom that not
necessarly has
an OS user profile.

On Fri, Mar 23, 2018 at 7:08 PM, Henrik Rützou <hr@xxxxxxxxxxxx> wrote:

All of course in a structure of SYSTEM, USERGROUP or USER level

On Fri, Mar 23, 2018 at 7:07 PM, Henrik Rützou <hr@xxxxxxxxxxxx> wrote:

Nathan,

yep, and you suggests to control the services methods, and I would say
and then
you need to implement vertical and horizontal view and update control -
per method.

On Fri, Mar 23, 2018 at 6:52 PM, Nathan Andelin <nandelin@xxxxxxxxx>
wrote:

On Fri, Mar 23, 2018 at 11:44 AM, Henrik Rützou <hr@xxxxxxxxxxxx> wrote:

Nathan,

and then you are not even half way through ;-)

We're talking about end-user access privileges - just to put your comment
in context. By "half way through" I gather that you're suggesting that
there may be more to providing access to IBM i resources than just
checking
to see if users are authorized to invoke an API, right?
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
Regards,
Henrik Rützou

http://powerEXT.org <http://powerext.org/>

--
Regards,
Henrik Rützou

http://powerEXT.org <http://powerext.org/>