urlDecode path parameters
Permissions check before api method calling