How can you restrict access to a custom API resource?
A) Only by creating a new role under System/Web Services/Roles
B) By setting up an ACL in etc/api.xml and creating a new role for it in System/Web Services/Roles
C) Only by extending Mage_Api_Controller_Action and overriding the _isAllowed method
D) By setting up an ACL in etc/adminhtml.xml and creating a new role in System/Permissions/Roles

Question

Quizplus · Accepted Answer

To restrict access to a custom API resource, you need to set up an Access Control List (ACL) in etc/api.xml and then create a new role for it in System/Web Services/Roles. This ensures that the API resource is protected and only accessible to users with the appropriate permissions.

How Can You Restrict Access to a Custom API Resource