Oh, yes. For that use case Secure API Connectors is the best way; I believe it was designed for exactlly your type of use case.
I haven’t used this new feature myself yet, so I’m not much help there.
My hypothesis on the role-based access of the particular logged-in user: that sounds very complex and unlikely to be possible. My reasoning is that I’ve used or looked at most API calls and they typically use the admin access of their client id/secret, and I don’t believe I’ve ever seen the ability to filter by a userId (and their permission set) on a content-based call like GET ideas.
There’s probably a multi-step way to get to that:
- widget calls the API about that user to get their roles
- widget has some way to align roles with the access of certain ideas
- widget has those parameters to filter the call for ideas
But your work is cut out for you there.
If i was given this use case to deliver, I’d very likely simplify to:
- Separate widgets for each access type of Ideas
- Widget visibility settings for each widget based on segments
That combination has a bit of duplicative effort, but the widget visibility via segments would be the most reliable way to control who sees what. It’s also complex, but I’d rather solve complexity in segments and visibility settings, than try to solve it in the API calls that aren’t designed to filter by current user.