Comment Comment by treis >1. Go to an embedded page, authenticated as the “API user” (which looks like you’re sandboxed within DS to the embedded page)>2. Refresh the page>3. You now can click around the entire account - viewing any data that belongs to the API user (in our case, all of the data).I don't quite understand this. Shouldn't you be able to control what is displayed during the refresh? parent treis 7 years ago
>2. Refresh the page
>3. You now can click around the entire account - viewing any data that belongs to the API user (in our case, all of the data).
I don't quite understand this. Shouldn't you be able to control what is displayed during the refresh?