Please refer to the document on API Access Policy - PlayFab | Microsoft Docs. In addition, it is also recommended to retrieve the default API Policy via GetPolicy API call. In terms of Entity Policy, you may navigate to [Game Manager] -> [Title Settings] -> [API Feature] to check the format of default Policy.
I had read the document in you provided link. It explains some of the values only like what will "*" do, what will "Deny" do, etc. But it doesn't contains all possible values of keys. Can you guide me about this ? Thanks
Sure. If it is API policy, the action will only be "*" and with Effect "Allow" or "Deny" to modify the API access.
While, if it is Entity policy(including Group policy), the action can be "Read", "Write" or "*", and the Effect is the same to modify a specific behavior of an Entity data access.
{
"Action": "Write",
"Effect": "Deny",
"Resource": "pfrn:data--*!*/Profile/Statistics/*",
"Principal": "*",
"Comment": "Only title can edit user statistics",
"Condition": {
"CallingEntityType": "title_player_account"
}
},
{
"Action": "Write",
"Effect": "Deny",
"Resource": "pfrn:data--*!*/Profile/Statistics/*",
"Principal": "*",
"Comment": "Only title can edit user statistics",
"Condition": {
"CallingEntityType": "character"
}
},
{
"Action": "Write",
"Effect": "Deny",
"Resource": "pfrn:data--*!*/Profile/Statistics/*",
"Principal": "*",
"Comment": "Only title can edit user statistics",
"Condition": {
"CallingEntityType": "master_player_account"
}
},
Thank you so much, it clears a lot of issues. The last thing i wanna ask here is the difference between these three policies. its confusing as each policy comment is same.
3 People are following this question.
