Allow all API calls except DELETE operation
Posted: Wed Aug 26, 2020 11:36 am
Hello,
I am trying to give a set of users the ability to do GET, PUT and POST operations using API. I tested it at my end and it works. Couple of queries around it:
1. Does the API calls only works for resources with Admin privileges? I tried to setup my colleague as an 'User' and he received 'Access Denied' message
2. How to ensure a user have abilities to do GET, PUT and POST, but bar that user from DELETE operation?
I am trying to give a set of users the ability to do GET, PUT and POST operations using API. I tested it at my end and it works. Couple of queries around it:
1. Does the API calls only works for resources with Admin privileges? I tried to setup my colleague as an 'User' and he received 'Access Denied' message
2. How to ensure a user have abilities to do GET, PUT and POST, but bar that user from DELETE operation?