Self Client, Zoho Projects, and User-level authentication

Self Client, Zoho Projects, and User-level authentication

Hey everyone,

I'm new to this style of development, and have some questions. I'm looking to develop a C# application that hooks into a company's Zoho Projects to read/write/do whatever. I have a Self Client setup, and the OAuth2 working just fine.

What I'm looking to achieve is require the users of the application to authenticate or login using their Zoho account against the company's project permissions. I may be poorly wording it, so for example.

- I launch the application, and generate the application's authentication token
- Before accessing the company's Zoho Projects information through the API, I need to login to the company's Zoho Projects page through the application, as if I'm logging in through the browser
- Upon success, the user's access level determines what calls they can do against the API in regards to reading and writing projects

Is there a way to achieve this? I don't want to have any anonymous user of the application to be able to make changes to the company's projects. Is this something that be done through Zoho's APIs, and I'm just missing the writeups, or is this something I have to roll out myself? Am I going about this the wrong way entirely?

If you can think of anything else an amateur like me would need to know about this, it would be greatly appreciated.

Thanks