Hi Harish,

The enhancer does not currently require any particular permission. Only
some engines do.

To achieve your goal we should add a permission check to the enhancer for
an EnhancerPermission. Then you could create user which have that
permission. I suggest to add this permission to the anonymous user (more
precisely to BasePermissionRole) so that requiring authentication for the
enhancer is optional (one has to remove this permission from
BasePermissionRole).

Cheers,
Reto


On Mon, May 13, 2013 at 5:22 PM, harish suvarna <[email protected]> wrote:

> While running the stanbol server without -no-security option, and not using
> --user and --paswd options, we are still able to get the enhancer request
> fulfilled. I was hoping to see some authentication failure.
>
> My intention is run the stanbol so that only users with userid/passwd are
> able to run enhancement requests using restful calls. Restful calls without
> userid/passwd known to stanbol should fail.
>
> --
> Thanks
> Harish
>

Reply via email to