Access restrictions table
The following example combines role-based restrictions with plan-based restrictions for API access. Here, access is not only depending on the role typically acquired by user authentication, but also depending on the plans associated with a Tech-Client.
# | HTTP Method | Path | Restricted to Roles | Restricted to Plans |
---|---|---|---|---|
1 | .* | ^/payments | strong | payments |
2 | ^GET$ | ^/accounts | weak, strong | accounts |
3 | ^GET$ (inverted) | ^/accounts | strong | accounts |
4 | .* | ^/apis | public-apis |