ramirez mullan

← Customer Feedback for Xero API

My feedback

1 result found

  1. Create more granular accounting scopes (eg: Sales - Invoice only)

    165 votes
    10 comments  ·  Accounting API » Authentication  ·  Admin →
    How important is this to you?
    An error occurred while saving the comment
    ramirez mullan commented  · 

    The lack of granular permission controls in some systems can indeed lead to significant security and privacy concerns. When access to one functionality, such as creating Sales Invoices, inadvertently includes access to unrelated sensitive data like Bank Transactions, it opens the door to potential misuse. This issue is especially critical for Custom Connections, where developers require limited access but inadvertently gain broader permissions. Implementing more refined role-based access control (RBAC) systems could help address this challenge. For other structured data solutions, tools like https://arrests-ny.org/ showcase how accessibility and security can be balanced effectively.

Feedback and Knowledge Base

(thinking…)