basically app are given access to api. and that'd give all the app's player access as well unless that player has been specifically banned