able to report and get report.

api handle exception.
prevent unauthorized API access.