Hello DocuSign Community,
We’re integrating DocuSign with our internal system via the REST API and encountered an issue with controlling permissions in Sender View.
What works:
- 	
We successfully create an envelope via API with attached documents.
 - 	
The envelope remains in
createdstatus, as intended. - 	
We then create a Sender View (embedded) using the
CreateSenderViewAPI call. 
Our goal:
We want the sender to add tabs (fields) for other recipients, but not be able to:
- 	
Edit or remove the document itself
 - 	
Add/remove recipients
 - 	
Change routing or envelope metadata
 
What we tried:
We passed the following parameters into the ReturnUrlRequest (as described in the documentation):
{  "returnUrl": "https://ourapp.com/return",  "configuration": {    "disableDocumentEdit": "true",    "allowRecipientRecursion": "false",    "allowComments": "false",    "allowReassign": "false",    "messageLock": "true",    "useDisclosure": "false"  }}Problem:
Despite passing all the configuration flags, the resulting Sender View still shows all buttons and options, including:
- 	
"Edit Document"
 - 	
"Add/Remove Recipients"
 - 	
And the sender can actually perform those actions.
 
It appears that the configuration is not being respected, or that we're missing something crucial.
Questions:
- 	
Are these config options still supported in current API versions?
 - 	
Is there any other way to allow only field placement while locking all other editing options in Sender View?
 - 	
Should we use a specific user role (like
Editor) instead? - 	
Could this behavior depend on account-level permissions?
 
Thanks in advance for your support!
We would greatly appreciate an example or working configuration that enforces field-only editing.
        Back to Docusign.com
      