Visibility of API that is private for a user group

[bajiat]

Definition of done

• If the API is visible to a group, only those people can
  • see the API in the catalog
  • see the API profile page
• If an unauthorized user has the direct link to the API profile, they must see a 403 .

Wireframe

1. API Catalog Card View
   
2. API Catalog table View
   

In both cases, Users having access to Private API should be able to see them in API Catalog.
Respective Card & Table will contain a tag named Private.
Public APIs should not have any tags

1. API profile view
   

   Tag should appear beside API name.
   Should be larger in size than card/table view

[Nazarah]

@jykae : i have added the wireframes.
You can use BS tag components to implement this.
Explanations are given in the wireframe section.
http://v4-alpha.getbootstrap.com/components/tag/

[jykae]

@Nazarah otherwise nice idea but we are not in v4-alpha, in our version it is still called label, http://getbootstrap.com/components/#labels

it looks the same so I use that

[jykae]

@bajiat Description is a bit mixing concepts between 401 & 403 http://stackoverflow.com/questions/3297048/403-forbidden-vs-401-unauthorized-http-responses

I think 403 is appropriate for this, unauthorized is a bit different.