返回
-
标题
Is it possible to disable access to RESTful API? -
说明
Is it possible to disable access to RESTful API? i.e. when user will try to open https://<Appliance IP>/service/core/swagger it will show nothing (404)? -
解决办法
No. All interaction with Safeguard is via the API - even the desktop and web clients communicate with safeguard via the API. So disabling the API is the same as disabling the UI.Which API endpoints the user has access to is dictated by admin role permissions and access policy settings. There are few unauthenticated endpoints such as the swagger URI and the /service/appliance/Version endpoint which provide metadata about the server and allow the clients to detect whether the appliance exists and is available. There is no way to disable the metadata endpoints. -
变更请求
806173