Assets API CRUD operations | Community
Skip to main content
A
Antony6790
April 15, 2021

Assets API CRUD operations

  • April 15, 2021
  • 2 replies
  • 1105 views

Hi All,

 

We want to use Assets API to only expose Content Fragments as JSON and not allow Create, update and delete operation.

 

What is the best way to block these operation? Add DENY rule in dispatcher filter on POST method for /api/assets path or any other options available?

 

Appreciate inputs.

 

Thanks.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

2 replies

Asutosh_Jena_
Community Advisor
Asutosh_Jena_Community Advisor
Community Advisor
April 15, 2021

Hi @antony6790 

 

You can block all the request by default and allow only the GET requests with /api/assets path and JSON as the extension.

This will ensure only fetching the asset details/retrieval of asset is allowed whereas rest all operations are blocked.

 

/0001 { /type "deny" /glob "*"}
/000X #other rules are here for website
/0003 { /type "allow" /method "GET" /url "/api/assets/*" /extension 'json' } #whatever path it is.

 

Thanks!

    joerghoh
    Adobe Employee
    joerghohAdobe Employee
    Adobe Employee
    April 15, 2021

    Are ACLs on the asset an option?

      A
      Antony6790Author
      April 15, 2021
      We are trying to expose CF from Publisher using a separate dispatcher domain. We want to restrict at dispatcher itself before even reaching publisher.
        Terms & ConditionsAccessibility statement

        Loading footer...