Experts,

How to check the user logged in - from direct login or using api access or using Oauth? If so can I block that user accessing certain objects?

Can I check the above using AuthSession object's sessiontype? or is there a way?

Once I find the user how he/she is logged in, how can I restrict the user to access only a few objects (for example Account, Contact and Opportunity only)

Thanks in advance for your help.

Regards Gopal

How to check the user logged in - from direct login or using api access or using Oauth? If so can I block that user accessing certain objects?

Can I check the above using AuthSession object's sessiontype? or is there a way?

Once I find the user how he/she is logged in, how can I restrict the user to access only a few objects (for example Account, Contact and Opportunity only)