Apigee Drupal Portal DRUPAL_RBAC module showing all API Products

[urbanenomad]

I am using the Drupal Apigee Kickstarter portal and I got it mostly working.  I am trying to limit API product list in the create-app page so that only people with certain roles is able to see certain API Products.  I installed Apigee Edge API product RBAC module and it looks like this module does see the DRUPAL_RBAC custom attribute field in apigee.  But when I use a non-admin account that has custom role linked to certain API Products via the DRUPAL_RBAC mapping, I can still see all the API products available rather than just the ones mapped to the DRUPAL_RBAC attribute.  It seems when I don't have the RBAC module installed the API products do get filtered based on access controls on the API product.  But it doesn't seem to have the same effect with Apigee Edge API product RBAC.  Has anyone tried out this module and got it to work?

[AlexET]

Hello @urbanenomad, we appreciate you posting this question and your patience as we monitor the conversation. We’re inviting our community members to chime in with their expertise. Rest assured, we’re here to help you get a response.

Don’t miss out on joining us at our virtual event this week on Nov 14 for more learning and engagement - "Spec-Driven Development for Apigee: A Fully Automated CI/CD Approach", you can register here! 

[kedarkhaire]

Hi @urbanenomad 

This documentation and the links within it will help you.

If it does not helps, please let us know the requirement to understand your request.

Thanks!

[urbanenomad]

so I saw this documentation already and I have enabled RBAC management of API products, but when I login as a regular user and try to create a new App I still am able to see all the APIs rather then just the limited number of APIs that have the DRUPAL_RBAC field populated with a role name.  In the API Product Access page it does have the checkbox for the api products that have that attribute configured.  But it doesn't seem to remove that API product from the App Creation page if the person is not in the same role as the API product.

[kedarkhaire]

Hi @urbanenomad 

Can you please create a issue with details here - https://github.com/apigee/apigee-edge-drupal/issues

We will carry out further discussions & development over here. 

Thanks!

[urbanenomad]

issue created.  https://github.com/apigee/apigee-edge-drupal/issues/1098