What does «resource ref» mean in a webapi.xml?

dmitry_fedyuk · April 4, 2017, 12:32am

ref.
Required.
Referenced resource.
Valid values are self, anonymous, or a Magento resource, such as Magento_Customer::group.

Note:The Magento web API framework enables guest users to access resources that are configured with anonymous permission.

Any user that the framework cannot authenticate through existing authentication mechanisms is considered a guest user.

An example

github.com

mage2pro/core/blob/2.4.27/Payment/etc/webapi.xml#L6-L14


      
          	<route url='/V1/df-payment/:cartId/place-order' method='POST'>
          		<service class='Df\Payment\PlaceOrder' method='guest'/>
          		<resources><resource ref='anonymous'/></resources>
          	</route>
          	<route url='/V1/df-payment/mine/place-order' method='POST'>
          		<service class='Df\Payment\PlaceOrder' method='registered'/>
          		<resources><resource ref='self'/></resources>
          		<data><parameter name='cartId' force='true'>%cart_id%</parameter></data>
          	</route>

Details

dmitry_fedyuk · April 5, 2017, 1:31pm