My Salesforce org has integration with Zapier using a SF user having a Minimum Access Profile. This user has read-access to only a custom object CZAP.
My objective in Zapier is to extract the attachment of CZAP record. To do so, I use the Get Record Attachment event of Zapier.
My question: The SF user having a Minimum access profile which I am using to connect Zapier with SF, will it has access to all the attachments records of Salesforce? e.g. attachments of Case obj, Opportunity obj; although my connected user does not have access to Case & Opportunity.
OR
It will have access to only the attachments of CZAP object?
Asking this question from security compliance point of view.
