If that checkbox is used it should ask for authorisation on every call.
Without it (the default way) you authorise only on first time and then you have a session open until it expires.
Hi, Paul.
Sounds like you're talking about REST API. And that your are overwriting data with older values if B managed to read record before A finished to update it. Classic conflict resolution ...
