REST End Point Security

Summary

REST End Point Security

Content

I have shared a REST endpoint with an external user to GET invoices. In order to do so, I created a custom oracle user account and assigned the necessary roles. Since REST endpoints are available in the public domain, the external user can use any REST end point to create/update invoices.

How can I put a control on it?

Thanks. Sanjam.