This is a security feature of PIXERA, as some API functions allow extensive access to a system. When enabled, this allowlist will only permit all API commands/control actions in the Action Allowlist. This also affects the web UI controls.

To deactivate this restriction, please deactivate “Restrict Web Access to Actions That Match Allowlist”

This checkbox affects all commands sent from an external web UI, as well as API commands sent to one of the API access points.
The API access points can also be activated and deactivated separately.
 If the “Restrict Web Access to Actions That Match Allowlist” checkbox is unchecked, this also disables API access restriction even if “Use Control Action Allowlist To Restrict API Access” is checked.

The behavior in the Control Web UI when commands and/or control functions are not enabled can be seen in the upper right corner.
Here, the user is informed that they are not authorized.
 

The web UI editor within PIXERA Control is exempt from this restriction, it always has full access rights.

Allowlist options

To restore full access to the API, please uncheck the box “Restrict Web Access To Actions That Match Allowlist.”

The allowlist provides an editor that allows you to set commands. It also has an export and import function.

Syntax

• NewModule.test →Only allow the action “test” in “NewModule”
• NewModule.Folder.* → Allows everything in the Folder “Folder” of Module “NewModule”
• NewModule.* → Allows Everything in “NewModule”

The “Deny” Button allows inverting that to only deny those commands

Export

The Export button allows you to export the list in JSON format.

{
 "entries": [
  {
   "command": "NewModule.test",
   "isBlack": false
  },
  {
   "command": "NewModule.Folder.*",
   "isBlack": false
  },
  {
   "command": "NewModule.*",
   "isBlack": false
  }
 ]
}

Import

The Import button allows you to import the list as JSON using the syntax described above.

PIXERA 25.2 RC 12  | 2. October 2025 | J.B.