Umbraco-CMS/src/Umbraco.Web.UI/config/restExtensions.config

<?xml version="1.0" encoding="utf-8"?>
<!-- this is the pre-4.10 rest configuration -->
<!-- you should use BaseRestExtensions.config instead -->
<RestExtensions>
  <!-- available for backward compatibility only -->
  <ext assembly="umbraco" type="umbraco.presentation.umbracobase.library.member" alias="currentMember">
    <permission method="login" allowAll="true" />
    <permission method="logout" allowAll="true" />
    <permission method="id" allowAll="true" />
    <permission method="data" allowAll="true" />
    <permission method="logout" allowAll="true" />
    <permission method="setProperty" allowAll="false" />
  </ext>
  <!-- here for backward compatibility only -->
  <!-- because really, it should not be enabled by default -->
  <ext assembly="Runway.Blog" type="Runway.Blog.Library.Base" alias="umbBlog">
    <permission method="CreateComment" returnXml="false" allowAll="true" />
    <permission method="GetGravatarImage" returnXml="false" allowAll="true" />
  </ext>
</RestExtensions>