...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
It is possible to define ACLs for private user tokens. These ACLs are not required tokens private to the Management API Client because those tokens are.. completely private to the Management API Client.
...
- owner like this (PUT /api/rest/v1/user/{userId}/token):
"owner": { "id": "string", "type": "USER" }
- read-write (POST /api/rest/v1/user/{userId}/token/{key}/rw) in an array
[ { "id": "string", "type": "USER" } ]
- read-only (POST /api/rest/v1/user/{userId}/token/{key}/ro) in an array
[ { "id": "string", "type": "USER" } ]
This arrangement allows for controlled sharing of user data between external applications.
...