MAGETWO-66882: Allowing Web API listing to be public - 2.2

 - make all services only available for SOAP while REST is protected

Author: Robert He

app/code/Magento/Webapi/Model/AbstractSchemaGenerator.php

@@ -75,7 +75,7 @@ public function __construct(
     }
 
     /**
-     * Retrieve a list of services visible to current user.
+     * Retrieve a list of all services.
      *
      * @return string[]
      */

app/code/Magento/Webapi/Model/Rest/Swagger/Generator.php

@@ -897,4 +897,23 @@ private function generateMethodExceptionErrorResponses($exceptionClass, $respons
 
         return $responses;
     }
+
+    /**
+     * Retrieve a list of services visible to current user.
+     *
+     * @return string[]
+     */
+    public function getListOfServices()
+    {
+        $listOfAllowedServices = [];
+        foreach ($this->serviceMetadata->getServicesConfig() as $serviceName => $service) {
+            foreach ($service[$this->serviceMetadata::KEY_SERVICE_METHODS] as $method) {
+                if ($this->authorization->isAllowed($method[$this->serviceMetadata::KEY_ACL_RESOURCES])) {
+                    $listOfAllowedServices[] = $serviceName;
+                    break;
+                }
+            }
+        }
+        return $listOfAllowedServices;
+    }
 }