REST API V1 credential account READ-ONLY

Epicor ERP 10
1

Hello all,

I’m not sure if this even logical to have a limited Basic authentication for the username and password as just to read-only and another account for POST and GET ?

2

You might have better control of this via some sort of middleware API that authorizes certain endpoints/verbs based on credentials and not others.

3

I agree with @Aaron_Moreng. I’m not sure this is best managed within Epicor. I’d use a 3rd party service.

4

Thanks @Aaron_Moreng and @chaddb for the input, really appreciated. Would you mind sharing which 3rd party? or is it confidential information?