I need to implement admin-privileged repository webscript, but for security reasons I'd like to limit calling this script only to Share webscript controllers. I could then call the Share module from the client, and verify whatever I need before passing a call to this webscript.
Currently I am making two calls to the repo from my share module, which seems inefficient.
I've ended up adding an access token when calling from share webscript. I cannot really restrict the access to the full repo, as there are other places I pull info from Alfresco from.