Question
Maantic Inc
US
Last activity: 12 Jan 2021 2:12 EST
How Pega API able to access build on apps datapages
Hi, We are doing POC with pega API, mainly data API - it will provide response value for given datapage.
Application structure
Test 1: Service package and Service REST rule in Pega-API (Pega Platform application), datapage in mobile app - Without any issue service able to access mobile app data page
Test 2: Service package and Service REST rule in CSR application, datapage in mobile app - here service rule in CSR application not able to access mobile application datapage
Test 3. Service package and Service REST rule in mobile application, datapage in mobile app - Without any issue service able to access mobile app data page
I want to understand - How Pega platform application service rule able to access mobile apps datapage? why it is not working for CSR application in same stack
Pegasystems Inc.
AU
Do the logs record any more specifics about the error? Is it "rule not found"? Is it "unauthorized"?
The Access Group used to resolve rules via a Service Package that requires authentication is the default Access Group for the authenticated Operator - see Example of authenticated user's access group.
The Access Group used to resolve rules via a Service Package that does not require authentication is the Service access group configured on the Service Package - see Example of unauthenticated user's service package access group.
If you are getting different rule resolution or authorization results between calls, it is most likely that you are authenticating with different users, which have different default Access Groups and yield different ruleset stacks.
In other words, when invoking a service in a Service Package requiring authentication:
Do the logs record any more specifics about the error? Is it "rule not found"? Is it "unauthorized"?
The Access Group used to resolve rules via a Service Package that requires authentication is the default Access Group for the authenticated Operator - see Example of authenticated user's access group.
The Access Group used to resolve rules via a Service Package that does not require authentication is the Service access group configured on the Service Package - see Example of unauthenticated user's service package access group.
If you are getting different rule resolution or authorization results between calls, it is most likely that you are authenticating with different users, which have different default Access Groups and yield different ruleset stacks.
In other words, when invoking a service in a Service Package requiring authentication:
- The Service access group on the Service Package has no effect on rule resolution; and
- The ruleset in which the Service-REST rule resides has no effect on rule resolution of the rules it references.
Please report back with what you find.