This is an RFE issue to consider backporting some minor RBAC-related features from WF to EAP. For WF 8 we are adding two minor improvements to the management API description operations: 1) Ability to add an "access-control" parameter to the "read-operation-names" operation and if true (default is false) have the response exclude operations the user is not authorized to execute. 2) Ability to add an "access-control" parameter to the "read-operation-description" operation and if true (default is false) have the response include descriptive data re: the user's ability to execute the operation. The much more commonly used read-resource-description operation already provides this information, which is why this is a minor feature we didn't target for 6.2.
Verified with EAP 6.2.0.ER6.