Customuserinfo RESTAPI

Dynamic permission doesn't work in community version

Hi
I want to use Dynamic permission to restrict access to users. Actually, I wand to let the user access and modify only himself.
I added below codes in dynamic-permissions-checks-custom.properties.

Why can any user access custom information?

I want to use Customuserinfo API for getting custom data of users. After testing it, I realized that any user can get custom data of other users by using Customuserinfo API. Is there any problem? I think it's a security problem.
I try API in version 7.7.4 and 7.8.4.
Is there any way that users access only their information?

[Bonita 7] customuserinfo REST API gives 403 Forbidden

Hello,

I'm using Bonita 7.2 and I'm trying to use ../API/customuserinfo/ API through Postman(Chrome extension for testing REST API). I'm getting 403 Forbidden error. I think there is some permission issue. The user I'm using for this API is of Administrator profile. Please suggest if anything is missing.

Regards

CustomInf List from Rest API (404 error)

Notifications