Maybe Jeff’s explanation and Darren’s video in the thread below will shed some light.
- I quote @Jeff_Hager (from the thread below):
When you intentionally build a role-changing feature on the backend, you as the developer have far more control over the logic and who is allowed to run it. It’s no longer about somebody tampering with API calls. It’s about deliberately creating a controlled process and enforcing strict conditions around when and how it can execute.
I think it depends what you mean by manual and programmatic:
- manual inside the data editor: should work
- manual from inside the app and client side: won’t work
- manual from inside the app and server side: should work
- programmatic: good question
-
See @Darren_Murphy’s video. He uses Make (though not demonstrated in the video) as well as the webhook trigger (demonstrated in the video) and the manual trigger.
-
If you have an onboarding flow, an action on a button triggerd by a customer could write the appropriate role. Not exactly programmatic, but a forced manual setting of the role unbeknownst to the user.