7.3 Enabling Authorization for REST-enabled Objects

Restrict access for REST-enabled objects on the RESTful Services page. Use the resulting Authorization Role information to configure user roles in ORDS.

When authorization is disabled for REST-enabled objects, they are fully exposed to normal internet traffic and publicly accessible. After you enable authorization for the object on the RESTful Services page, you must use the resulting Authorization Role to configure your authorized user roles in ORDS.

To enable authorization on a REST-enabled object:

1. On the Workspace home page, click SQL Workshop and then RESTful Services.
   The RESTful Services home page appears.
2. Click Enabled Objects in the RESTful Data Services tree.
3. Under Parsing Object, click the object name.
4. For Authorization Required, click Yes.

   A new Authorization Role field appears showing the ORDS created role associated with the AutoREST-enabled object. If you enable authorization for the object, you can use the resulting Authorization Role information to configure user roles in ORDS.

5. Click Apply Changes.