This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
How can you make it so that only a few registered applications can post, put and delete a resource, but others can read? Do you have to create different products just to make this distinction between permissions?
So, on resource level you can still use the API Products. Although OOTB there is no validation on the HTTP Verb. So hopefuly you can distinguish the Verb by having different resources, but that might not be the case, such as;
GET /resources
POST /resource
An interesting solution to this might be this post, which doesn't even seem that much effort to implement:
LinkedIn
Twitter
