Our application was impersonating an account that had viewer uploader permissions on a folder in Box and was able to delete a file thru the API (not Web UI).
My understanding was a viewer uploader did not have delete permissions. Is that in the Web UI only?
Question
Account with viewer uploader permission was able to delete files using API
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.