Page History
...
To secure a webservice a role must be added to the baa(r)s service. There are two methods to add roles to the service, at the service definition or at the exposed flow which is started from the webservice.
Service definition
A role Role can be added at the to each operation soap/rest of a service definition in a Web service.
Exposed flow
A role Role can be added at the to an exposed flow Flow (which is started from the service definition). This can be useful if the flow is started from multiple contexts. Otherwise adding the role at the service definition is preferable over this option.
Security endpoints
...
Overview
Content Tools