...
The Fedora Policy Enforcement Point Extension (PEP extension) allows you to implement one interface to enforce access control over your Fedora repository. This This interface, the FedoraPolicyEnforcementPoint, has callbacks that allow you to restrict ModeShape operations and filter search results. After following these configuration steps, Fedora's REST endpoints will respond with 403 response codes when the requested action is unauthorized by the PEP.
Note: Use of a PEP and Fedora-specific authorization is optional. You can also configure Fedora to run without API security. You may want to only enforce container authentication or leave the service running completely unsecured, behind a firewall for instance. For details, see How to configure Fedora without authorization.
Fedora Administrators (fedoraAdmin user role)
...