We've a production App running with live customers. We usually make update and migrate to Shopify new versions. But sometimes, new rules need to do a lot of tests in testmode, so we cannot push our App to live directly or doing test with the live App. So, we have a test app that mimic the prod one, however some acces scope (read_all_orders, customer data, etc) require a shopify review, since it's not an official app, we don't need to review it to get those access scope on it.
It's there a way, once an app is installed on develpment store or somehow to enable access scopes ? with AppleStore it's possible to develop all features needed in the app without first go trough the review process. The main issues is with ngrok with production URL (www.webapi.yyy.com) cannot debug nothing remotly and not recommended, to receive hooks events, and so on.