How can you restrict access to a custom API resource?

Question

Options

• AOnly by creating a new role under System/Web Services/Roles
• BBy setting up an ACL in etc/api.xml and creating a new role for it in System/Web Services/Roles
• COnly by extending Mage_Api_Controller_Action and overriding the _isAllowed method
• DBy setting up an ACL in etc/adminhtml.xml and creating a new role in System/Permissions/Roles

• A
  79% (23)
• B
  7% (2)
• C
  3% (1)
• D
  10% (3)

No community discussion yet for this question.