InspectorGadget
Well-Known Member
- Joined
- Mar 9, 2009
- Messages
- 626
- Reaction score
- 346
IIRC no one had it - someone reset it - presumably via accessing Joey's email. I wondered if Mike had been involved in this? Perhaps @Force Ten has an opinion?
3rd party developer access to Joey's paypal account via the API
So when Dan sets up the website shopping cart using paypal as service provider, the website needs a paypal username login so that it can process the transaction on the paypal side, and the funds are credited to the correct account. One way to do this is to use Joey's ID.
But as I understand it, Paypal offers instead, the ability to grant your developer programmatic access to your account, under their own user name. And you can make that highly restricted or broad access
So I guess a very limited access is simply to process credit card payments.
But as I understand you can do almost anything over the API that you can do from the cloud.
e.g. deposits, refunds, statements, payments etc
We really don't know how all this worked.
Am I missing something? Wouldn't it be common sense that Dan would have granted himself the permissions using Joey's Paypal Email? If he asked Joey to do it, he would simply dictate to Joey whatever permissions he needed. In any case, I don't think access would have been an issue at the time they set it up.
It may have become and issue once Dan had been paid out because Joey may not have remembered how to revoke the permissions or had time to do it.