Definition and evaluation of editorial permissions on elements

Permissions can only be configured via the permissions management in the FirstSpirit SiteArchitect.

Additional documentation on this topic:

• see Editorial permissions (→Documentation FirstSpirit SiteArchitect)
• Configuration fragment project

The REST API can be used to evaluate the set permissions (Authorization API):

http://localhost:8080/swagger-ui.html#/authorization-service

• either generally for all fragments:
  http://localhost:8080/swagger-ui.html#!/authorization-service/genericPermissionUsingGET
• or for a specific fragment:
  http://localhost:8080/swagger-ui.html#!/authorization-service/fragmentPermissionUsingGET

For example, the Authorization Service allows you to display a button for creating elements only if the logged-in user has the necessary privileges.

The URL to which all requests are to be addressed is composed as follows:

http://Servername:Port/permissions/project/{projectId}/fragment/

However, annotations are used to protect individual methods, e.g.

@RequireFragmentCreation

Methods that are provided with this annotation require, for example, the permission to create fragments.