The API fully respects the security and access protocols configured through Force.com builder.