Hello DocuSign Community,
We’re integrating DocuSign with our internal system via the REST API and encountered an issue with controlling permissions in Sender View.
What works:
-
We successfully create an envelope via API with attached documents.
-
The envelope remains in
created
status, as intended. -
We then create a Sender View (embedded) using the
CreateSenderView
API call.
Our goal:
We want the sender to add tabs (fields) for other recipients, but not be able to:
-
Edit or remove the document itself
-
Add/remove recipients
-
Change routing or envelope metadata
What we tried:
We passed the following parameters into the ReturnUrlRequest
(as described in the documentation):
{ "returnUrl": "https://ourapp.com/return", "configuration": { "disableDocumentEdit": "true", "allowRecipientRecursion": "false", "allowComments": "false", "allowReassign": "false", "messageLock": "true", "useDisclosure": "false" }}
Problem:
Despite passing all the configuration flags, the resulting Sender View still shows all buttons and options, including:
-
"Edit Document"
-
"Add/Remove Recipients"
-
And the sender can actually perform those actions.
It appears that the configuration is not being respected, or that we're missing something crucial.
Questions:
-
Are these config options still supported in current API versions?
-
Is there any other way to allow only field placement while locking all other editing options in Sender View?
-
Should we use a specific user role (like
Editor
) instead? -
Could this behavior depend on account-level permissions?
Thanks in advance for your support!
We would greatly appreciate an example or working configuration that enforces field-only editing.