1
votes

I am working on Sitecore Item Web Api, I have a mulitisite solution and I want to give access of Sitecore Item web api to specific Site as per sitecore user.

For example, I have a demo site and have specific user for this site:

uname - test
pass - test123

My requirement is this user only can access given site via api not others Is it possible and how?

I am using http://sdn.sitecore.net/upload/sdn5/modules/sitecore%20item%20web%20api/sitecore_item_web_api_developer_guide_sc66-71-a4.pdf document and on page 13 it shows some extra fields for security "Field Remote Read" but in normal solution it's not showing any field like this

2

2 Answers

3
votes

If you cannot see the field from the column list like @nsgocev stated, make sure that "Sitecore.ItemWebApi.config" is present in your include folder and enabled. This config adds the remote:fieldread field to the access rights/security editor.

<accessRights>
  <rights>
    <add name="remote:fieldread" comment="Field Read right for remoted clients." title="Field Remote Read"/>
  </rights>
  ...
</accessRights>

Also make sure you set the correct mode to take this field into account (as stated in the documentation) to set up the API correctly.

<site name="website">
    <patch:attribute name="itemwebapi.mode">AdvancedSecurity</patch:attribute>
    <patch:attribute name="itemwebapi.access">ReadOnly</patch:attribute>
    <patch:attribute name="itemwebapi.allowanonymousaccess">false</patch:attribute>
</site>
1
votes

To display the Field Read Remote column you should enable it from the columns options from the ribbon:

Columns Option

And check the checkbox there:

enter image description here