Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Status Already Exists
Workspace Domino Designer
Categories XPages
Created by Guest
Created on Feb 14, 2024

Rest API XPAGES secure

I want to have an API that goes to a view and retrieves some data, but I don't want that user to access the database via the web. This is not possible because to create a REST API from XPages, you have to grant permissions to the database where you make the REST call, and that database must be accessible via the web.

Can I make that this database is not accessabe by web, only the APIS not all database. I want this improvement.

  • Attach files
  • Guest
    Reply
    |
    Feb 15, 2024

    I test this but I've problems with CrowdStrike because this consider a virus, and I must use an old version to install and test. I see that is designed for people that isn't administrator, but for making a more complex APIS is difficult. I think this possibility that the user and password that gives you in the API must have to access the data.

    The unique solution is using userroles and field read/write. But this is put more complex the database and when you want 50 users this is not possible.


    Yours sincerely, Roger.

  • Admin
    Thomas Hampel
    Reply
    |
    Feb 14, 2024

    Please use the Domino rest API's for that.
    https://opensource.hcltechsw.com/Domino-rest-api/index.html