Once the Connected App is created, how is access granted to various endpoints exposed as REST Services via Apex REST?
For example, if we have a Class called CreateCustomer, and it is decorated like so:
global with sharing class RESTCustomerController
global static void CreateCustomer(String firstName, String lastName)
Is there any way to restrict access to this specific class? Or, does a login with API access have access to all REST endpoints, and its own security settings take over, in terms of basic CRUD?
The documents are not particularly helpful in this regard. Any help is greatly appreciated!