Is there any way to disable endpoint: "v2/attachment"?

Data Services
1

Hi there,

Currently, our projects don’t want to expose the endpoint “v2/attachment” due to security issues but we are using some Java API from dataservices including AttachmentAssignmentService, AttachmentService, AttachmentLoadingService,… for saving our own generated attachment.

I tried mgmtp.a12.dataservices.attachments.enabled=false but it will disable the whole attachment handlers and I can’t use other APIs anymore.

Could dataservices team provide a separate key to disable/enable the endpoint?

Workaround solution: use feature from UAA at GetA12 Login

Version: a12DataServicesVersion=36.2.2

Best regards

2

Hi @nhat-round-cloud ,

Using authorization definition to restrict access to the controllers is a completely ok approach. I would not consider this a workaround. In version 37.0.0 DS will introduce a switch per controller so the customer projects can decide which controllers to enable and which to disable.

3

Hi @tomas-thin-gale,
That would be great!
Could you drop the ticket here?

4

Hi @nhat-round-cloud,

the ticket number is A12S-4005