Questions and discussions about using the Shopify CLI and Shopify-built libraries.
Hello,
Has there been any consideration for opening up to Users api to regular public embedded apps on any store level instead of only Shopify Plus?
https://shopify.dev/api/admin-rest/2021-10/resources/user#top
Right now you can only get the store owner email and thus have to usually treat everyone in your app as a single user and ignore any kind of permissions. Allowing access to the user api would improve the security of multi user apps and apps which use permissions to limit some user's actions. I don't see why you pay for multiple staff accounts even on the $29/month plan but only custom apps on Shopify Plus can make use of it? We own several stores ranging from regular plans up to Shopify Plus and would like to make apps with better permissions for all of them as well as the public.
After some more digging aparently you can make use of online oauth mode to get the current user even on non shopify plus stores and on any app type.
https://community.shopify.com/c/shopify-apis-and-sdks/online-amp-offline-session-tokens/m-p/1204358