2637860 - MDF Api call not respecting RBP or target populations

MDF use a separate permission for Odata admin. Please follow these steps to validate RBP permissions in MDF scenarios:

• Check if API user is granted with "Admin access to MDF OData API" permission or not, which will ignore MDF object level RBP setting for MDF objects (for both secured=yes and secured=no objects).
• If API user is not granted with "Admin access to MDF OData API" permission, for a MDF object with secured=yes, check if the API user is granted with required object level permissions and target populations to access the data.
• If API user is not granted with "Admin access to MDF OData API" permission, for a MDF object with secured=no, check if the API user is granted with “Access to non-secured objects” permission which will have full read/write access to the data.