/
4.2.8.1
Allowed configuring blocklists/allowlists for apps.
4.2.16.2
Changed the effective app path in custom rules to the complete API paths, for example, http://localhost:8068/webroot/service/884226ec-1869-40f1-9413-26bb72875ff8/API name.
To ensure secure API calls by external systems, you need to configure the blocklist or allowlist after publishing the API.
Data Service supports the configuration of both global-level and application-level blocklists/allowlists. The blocking logic is shown in the following figure.
The global blocklist/allowlist rule ensures overall service security and stability, effective for all APIs.
When configuring both global-level and application-level blocklists/allowlists, access to the current API requires permission at all levels.
Application-Level Blocklist/Allowlist Configuration
You can configure blocklists/allowlists for applications, allocating accessible resources to different visitors.
1. To view the rules, you must have acquired access to the Data Service module. For details, see Data Platform Use Permission.
2. Only super admins can configure global-level and application-level blocklists/allowlists. Other users can only view them.
Choose Data Service > Rule Management to enter the blocklist/allowlist configuration page, as shown in the following figure.
1. Click the icon, and then click Edit to edit global rules, as shown in the following figure.
2. Set blocklist/allowlist for all applications, as shown in the following figure.
3. Enable this rule, as shown in the following figure.
The relevant configuration descriptions are as follows:
Blocklist: IP addresses in the blocklist cannot access the API.
Allowlist: Only IP addresses in the allowlist can access the API. All IP addresses not in the allowlist are denied access.
IP
You can specify IP ranges and IP addresses.
1. IP range example: 192.168.2.0/24 This specifies the address range 192.168.2.1 through 192.168.2.254 (inclusive), excluding the network address (192.168.2.0) and the broadcast address (192.168.2.255).
2. IP address example: 192.168.0.1
Remark
You can add remarks for the IP address.
Quick Add
This setting is available from FineDataLink V4.2.8.1, enabling quick IP address adding, as shown in the following figure.
1. Click Add Custom Rule to add rules for an application, as shown in the following figure.
2. Configure the blocklist or allowlist.
3. The page after configuration is shown in the following figure.
For details, see the "Setting Global Rules" section of this document.
Target Object
Configuration object: applications within your permission scope.
Target object: all APIs bound to the selected application
4. On the App List tab page, you can view the blocklist/allowlist rules for a specific application, as shown in the following figure.
滑鼠選中內容，快速回饋問題
滑鼠選中存在疑惑的內容，即可快速回饋問題，我們將會跟進處理。
不再提示
10s後關閉
Submitted successfully
Network busy