Default Roles and Permissions of Cortex API Resources
Default Roles and Permissions of Cortex API Resources
Resource permission files are located at rest-resources\RESOURCE\src\main\resources\OSGI-INF\config
Out of the box, Cortex API resources have these roles and permissions:
| Resource | Default Roles and Permissions |
|---|---|
| assets |
relos.role.PUBLIC=LINK:*;READ:itemdefinitions;READ:{scope}
|
| availabilities |
relos.role.PUBLIC=LINK,READ:* |
| carts |
relos.role.PUBLIC=LINK:*;CREATE,READ,UPDATE,DELETE:items;CREATE,READ,UPDATE,DELETE:{scope}:default
relos.role.OWNER=CREATE,READ,UPDATE,DELETE:{scope}:{cartId}
|
| items |
relos.role.PUBLIC=LINK:*;READ:{scope}
|
| itemdefinitions |
relos.role.PUBLIC=LINK:*;READ:{scope}
|
| itemselections |
relos.role.PUBLIC=LINK:*;READ,CREATE:{scope}
|
| navigations |
relos.role.PUBLIC=LINK:*,READ:{scope}
|
| orders |
relos.role.PUBLIC=LINK:* relos.role.OWNER=CREATE,READ:{scope}:{orderId}
|
| paymentmethods |
relos.role.PUBLIC=LINK:*;READ,CREATE:{scope}:default:selector:orders;READ:selector:orders;READ:{scope}:creditcards:form;READ:{scope}:creditcards:tests:form;READ:{scope}:default;READ:{scope}:EOL;READ:orders
relos.role.OWNER=READ,CREATE:{scope}:{paymentMethodId}:selector:orders;READ:{scope}:{paymentMethodId}
|
| prices |
relos.role.PUBLIC=LINK,READ:* |
| profiles |
relos.role.PUBLIC=LINK:*;READ:{scope}:default
relos.role.OWNER=CREATE,READ,UPDATE,DELETE:{scope}:{profileId}
|
| purchases |
relos.role.PUBLIC=LINK:*;READ:{scope}:EOL;CREATE,READ:orders
relos.role.OWNER=READ:{scope}:{purchaseId}
|
| recommendations | relos.role.PUBLIC=LINK:*;READ:{scope};READ:items:*;READ:navigations:*
|
| registrations |
relos.role.PUBLIC=LINK:*;CREATE:{scope}:subscription:{unauthenticated};READ:{scope}:subscription:form;READ:{scope}:newaccount:form;CREATE:{scope}:newaccount:{unauthenticated}
|
| searches |
relos.role.PUBLIC=LINK:*;READ,CREATE:{scope}
|
| shipmentdetails |
relos.role.PUBLIC=LINK:* relos.role.OWNER=LINK:*;CREATE,READ:{scope}:{shipmentDetailsId}
|
| slots |
relos.role.PUBLIC=LINK:*;READ:{scope}
|
| taxes |
relos.role.PUBLIC=LINK,READ:* |
| totals |
relos.role.PUBLIC=LINK,READ:* |

