Permissions to individual doc types like Products, Customer etc are controlled by roles. OAuth is used to login to the application securely via secure token provided. Here is a link related oauth you may find useful
1 Like