MAGETWO-66882: Allowing Web API listing to be public - 2.2

 - make all services only available for SOAP while REST is protected

Author: Robert He

app/code/Magento/Webapi/Model/Rest/Swagger/Generator.php

@@ -15,6 +15,7 @@
 use Magento\Webapi\Model\Config\Converter;
 use Magento\Webapi\Model\Rest\Swagger;
 use Magento\Webapi\Model\Rest\SwaggerFactory;
+use Magento\Webapi\Model\ServiceMetadata;
 
 /**
  * REST Swagger schema generator.
@@ -907,8 +908,8 @@ public function getListOfServices()
     {
         $listOfAllowedServices = [];
         foreach ($this->serviceMetadata->getServicesConfig() as $serviceName => $service) {
-            foreach ($service[$this->serviceMetadata::KEY_SERVICE_METHODS] as $method) {
-                if ($this->authorization->isAllowed($method[$this->serviceMetadata::KEY_ACL_RESOURCES])) {
+            foreach ($service[ServiceMetadata::KEY_SERVICE_METHODS] as $method) {
+                if ($this->authorization->isAllowed($method[ServiceMetadata::KEY_ACL_RESOURCES])) {
                     $listOfAllowedServices[] = $serviceName;
                     break;
                 }