The Manager API

I recently created a topic on API - Should I be using Rest API to sync certain data as I wanted my clients logging in to my help desk to view quotes, sales orders and sales invoices that I have issued to them.

Seeing as quite a few people have responded to this topic, I thought that I would ask whether anyone has attempted to do this and how they got round the issue of filtering which sales invoices are for a specific client so you don’t have to open every single invoice, check which client it is for etc.

In the event that a custom report and the ability of the api to run this custom report not being available any time soon, I was wondering whether I could simply create a json file on my server and just populate it with an index of all sales invoices matching to clients. I don’t create a lot of invoices and quotes, so while it’s not an ideal option it is doable instead of spending a lot of extra money getting the helpdesk to store all this data to make it easy to filter.

Does the API still require administrator access? I would be keen to ensure that the API only has read access to Manager. I think that keys were going to be introduced, but now a limited user seems to be the direction going forward.