Protecting Access to Entity Service
Operations
You can protect access to the entity service CRUD (create, read, update, delete) operations by using the Access Control List (ACL).
The findBy operation is also protected. When it is executed, the permissions for read are checked.
To protect access to your entity service at design time, you must enable permissions checking from the Permissions tab page. For more information, see Permissions Tab Page.
For more information about protecting your services at runtime, see Authorization Tool