User getting 403 response when they shouldn't be

Users & Roles
2

This issue is solved when I attached the swagger api key along with a non-admin user request:

http://localhost:80/api/v2/exampleService/_table/exampleTable/exampleID?id_field=exampleIDfield
headers:
  X-DreamFactory-Session-Token: TokenHere
  X-Dreamfactory-api-key: swaggerAPIkeyHere

This is something I do not have to include when I send the request with an admin user. Is the intended or did I stumble upon a workaround?

when I create a service should I also create an “app” on the dashboard for that service then use that api key with requests? If so how would I go about making an app that is for a service?