Global setting to make product private default

[santhoshkumar_n]

HI,

Is there any Global configuration/setting in Apigee to make the product as Private when a developer creates. By default its taking as public and we dont want to make it public.

[anilsr]

@santhoshkumar.nagulanchi

Can you provide more context to above question ? By default, API Team Developer always have access to choose public / private product in the Edge UI. If you want to enforce all the API Products by default created as an Private, You can leverage management APIs. Apigee Edge UI doesn't support that. But, You can always restrict same using Management APIs.

[santhoshkumar_n]

HI Anil,

Planning to expose limited number of Products. But When admin team deploys any product to production environment and if they dont choose the option Private, by default its taking Public and its visible in devportal. To Solve this, As a mandatory manual step either we need to make it private or hide it from dev portal manually. As its manual and impact of displaying unintended products is not secure, we are looking for global configuration option... if apigee admin team does not choose any option, by default it has to take Private instead of Public unless its approved to make it public. Also same issue with new developers if they dont choose private, it will be exposed to dev portal and its security issue.

[anilsr]

@santhoshkumar.nagulanchi

Thank you for more details, Totally makes sense. In fact Myself & @Dino was discussing about exact visibility issues in portal few days back. We will take this feedback back to the Engineering team. We will keep you posted.

@harsh , @Chris Novak , @Daniel Johnson , Can we provide an option in Developer Portal using which we can by default change the visibility to all private using "DevConnect Limit API Product by Role" module ? What do you think ?

[santhoshkumar_n]

HI @Anil Sagar,

Do you have any updated info on this? We are waiting for such setting..

[santhoshkumar_n]

Do you have any updated info on this? We are waiting for such setting...

[DChiesa]

Anil, as you may remember, there is now a Drupal module available that changes the default visibility of API Products.

[DChiesa]

No, there is no Global configuration/setting in Apigee to make the product as Private when an administrator creates the product.

but, if you are using the Drupal-based portal, then there is a solution. With the enhanced role-based-access-control module in the devportal, you can block all Products by default.

I've described this in another Q&A here, and the code for this Drupal module is here.