In addition to security configuration, developer-defined filtering configuration exists to manage the output produced by client invocations of REST. This is accomplished through REST bean filtering.
For more information about this functionality, see Default Filtering in the ATG Web Services Guide.
