# A user is seeing all user's contacts through API

**URL:** <https://community.hubspot.com/t/a-user-is-seeing-all-users-contacts-through-api/11685>\
**Category:** APIs & Integrations\
**Tags:** contacts\
**Created:** [December 13, 2018, 2:18pm UTC](https://community.hubspot.com/t/a-user-is-seeing-all-users-contacts-through-api/11685 "2018-12-13T14:18:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/system/32/124_2.png) [@system](https://community.hubspot.com/u/system)\
**Post date:** [December 13, 2018, 2:18pm UTC](https://community.hubspot.com/t/a-user-is-seeing-all-users-contacts-through-api/11685/1 "2018-12-13T14:18:22Z")

</div>

There is set records view as “Owner Only” and from portal it is working fine but from api calling it is returning all records.

---

<div class="post-metadata">

**Author:** ![cbarley](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/cbarley/32/82559_2.png) [@cbarley](https://community.hubspot.com/u/cbarley)\
**Post date:** [December 13, 2018, 9:41pm UTC](https://community.hubspot.com/t/a-user-is-seeing-all-users-contacts-through-api/11685/2 "2018-12-13T21:41:42Z")

</div>

Hi [@subhankar.maiti](https://community.hubspot.com/u/subhankar.maiti), API requests using API key or OAuth do not take into account user visibility permissions. This behavior is to be expected.