We are going to code apex web service and distribute it to our clients for them to access.
The web service will take an input from the client to retrieve relevant data for each of them.
In this case, what are the best practices for the sharing settings(OWD's)? Should it be the most permissive or it doesn't matter as the web service is retrieving the data depending on the input from the client and will, therefore, can retrieve only their data?
This knowledge article https://help.salesforce.com/articleView?id=000176281&type=1 suggests having the most permissive access(ModifyAllData) to the integration user.
Your thoughts, please.