# Security & permissions updates for Webflow Apps

> Update: Added new endpoints to the Data API giving you more tools to access site configurations, and new methods to the Designer API, allowing you to determine a user's permissions and capabilities in the Webflow Designer.

Webflow Apps now require enhanced security and permissions.

* **Enhanced Workspace App Management Permissions:**\
  Previously, all members within a Workspace had the ability to manage Apps (for example, uploading new bundles, updating redirect URIs). Webflow enforces stricter permissions, allowing only Workspace Admins to perform these actions. This ensures that sensitive operations are restricted to authorized personnel.
* **Mandatory 2FA for Workspace Admins:**\
  To further enhance security, Workspace Admins are now required to have two-factor authentication (2FA) enabled to upload new App Bundles. This additional security layer helps protect your Workspace from unauthorized access and potential threats.

### SDK version

* **[Version 2.3.6](https://www.npmjs.com/package/webflow-api/v/2.3.6?activeTab=versions)**