Restricted authorization user for the REST API

Issue

• Given a restricted user and group that cannot access:
  a) The "product features" (see Configure->Configuration, access control accordion, select a role).
  b) Some resources: the group has been tagged with a category and some values in this category, so that it sees only the resources that have this tag value for this category.

• Do these Web Service restrictions apply as well to the CFME REST API, when authenticated as the given user.