Hi Jacobbe,

The list of whitelist and blacklist CS API commands is available in "applicationContext-cloudstackapi.xml", it is present in vmops.core-1.0-SNAPSHOT.jar.
You can extract the file from jar, update the blacklist/whitelist and place the updated XML file into "/usr/share/cloud/portal/webapps/portal/WEB-INF/classes" directory.

Please note that this will require a CPBM restart.

Thanks,
Manish