How Can You Restrict Access to a Custom API Resource

question 68

Multiple Choice

How can you restrict access to a custom API resource?

• A) Only by creating a new role under System/Web Services/Roles
• B) By setting up an ACL in etc/api.xml and creating a new role for it in System/Web Services/Roles
• C) Only by extending Mage_Api_Controller_Action and overriding the _isAllowed method
• D) By setting up an ACL in etc/adminhtml.xml and creating a new role in System/Permissions/Roles

---

Definitions:

GAAP

Generally Accepted Accounting Principles; a set of accounting standards, principles, and procedures that companies must follow when compiling their financial statements in the U.S.

Convertible Bonds

Bonds that can be converted into a predetermined number of a company’s shares at certain times during their life, usually at the discretion of the bondholder.

Diluted Earnings Per Share

A metric that calculates the quality of earnings per share (EPS) if all convertible securities were converted into common stock, indicating the potential dilution that could occur.

Diluted EPS

Earnings per share calculated under the assumption that all convertible securities and options have been converted into additional shares, potentially lowering the EPS.