Swagger API for limited user in a specific component

App Configuration
1

Based on the https://community.dreamfactory.com/t/swagger-api-for-limited-user/1893 we want to have a specific access to one component without selecting all component.

Example:
DB1 - Database 1
DB2 - Database 2
User - Limited User
_table/view_table - Specific Component
Get - Access Limit

User should have a Role that it can access DB1 & DB2 only and it is limited to access _table/view_table component only on Get access only limit.

But upon diagnosing and troubleshooting the Role, you need to select * (all component) for the api_docs to display instructions to pull api, meaning it will display all components for a specific database.

What we require is to limit the user to one Component only in a Get access limit, this is to prevent data loss and other issues.

Our DreamFactory Version: 2.14.0

2

Hello @mark_ddb. Thank you for reaching out. You are on the right path.

  1. You first need to create a role with the Get Access rights over the databases (DB1 and DB2).
    Then proceed to create a new user.

  2. Under the roles tab, enter the user info under the ‘Basic’ tab. Under the ‘Roles’ tab, from the drop-down list for api_docs, select the role you created in step 1

  3. Login with the credentials you created for the user in step 2.

When that user logs in, they will be presented with only the allowed endpoints you allocated under roles. I tried to replicate what you are trying to do. Here is a screenshot - https://share.getcloudapp.com/geuWXw9j

Let me know if this helps. I will be happy to answer any questions you have.
Thanks