Hi, I'm trying to use HTTP Basic authentication on CXFRS, but can't see a way to specify which user or group has access to a specific URL (or even just everything provided by one cCXFRS component, or even at the route level). However, I cannot see any way to specify which users or groups have access to it. So if I create a user for one of our suppliers they will have access to all of the services we expose, not just the service we want them to have access to. I am using HTTP Basic authentication rather than SAML because the suppliers I am dealing with are not sophisticated enough to know about SAML and we don't have the time to train them up in new technologies.
