Request: Consider opening User api to public apps & any shopify plan

epelc
Excursionist
22 0 11

Hello,

Has there been any consideration for opening up to Users api to regular public embedded apps on any store level instead of only Shopify Plus?

 

https://shopify.dev/api/admin-rest/2021-10/resources/user#top

 

Right now you can only get the store owner email and thus have to usually treat everyone in your app as a single user and ignore any kind of permissions. Allowing access to the user api would improve the security of multi user apps and apps which use permissions to limit some user's actions. I don't see why you pay for multiple staff accounts even on the $29/month plan but only custom apps on Shopify Plus can make use of it? We own several stores ranging from regular plans up to Shopify Plus and would like to make apps with better permissions for all of them as well as the public.

FreightChick - Automate your Logistics
CartJumper - Ecommerce Automation | Shopify NetSuite Connector
Reply 1 (1)
epelc
Excursionist
22 0 11

After some more digging aparently you can make use of online oauth mode to get the current user even on non shopify plus stores and on any app type.

https://community.shopify.com/c/shopify-apis-and-sdks/online-amp-offline-session-tokens/m-p/1204358

 

FreightChick - Automate your Logistics
CartJumper - Ecommerce Automation | Shopify NetSuite Connector