How to check the user logged in - from direct login or using api access or using Oauth? If so can I block that user accessing certain objects?
Can I check the above using AuthSession object's sessiontype? or is there a way?
Once I find the user how he/she is logged in, how can I restrict the user to access only a few objects (for example Account, Contact and Opportunity only)