If a user logs into the website, their permissions seem to be refreshed in the browser, allowing them to do things like view the dashboard. However, the API doesn't respect those permissions, and they are not allowed to read/write things they previously weren't allowed to do before logging in.
If a user logs into the website, their permissions seem to be refreshed in the browser, allowing them to do things like view the dashboard. However, the API doesn't respect those permissions, and they are not allowed to read/write things they previously weren't allowed to do before logging in.