https://pslens.com/tags/psauthws/Recent content in PSAUTHWS on psLensHugoen-usTue, 07 Jul 2026 00:00:00 +0000https://pslens.com/blog/service-operations-exposed-to-most-users/Tue, 07 Jul 2026 00:00:00 +0000https://pslens.com/blog/service-operations-exposed-to-most-users/<p>Ask a PeopleSoft security administrator &ldquo;who can call this web service?&rdquo; and you will usually get a pause. There is no delivered screen that ranks service operations by how many users can reach them. The grant is buried one level below where anyone looks: a service operation is authorized to a <em>permission list</em>, and permission lists ride <em>roles</em> out to users. A single broadly-held role can quietly put a data-moving web service in reach of hundreds of accounts that have no business calling it.</p>