The latest API uses access group permissions for windows that appear in access groups. Therefore for APVc to be accessible I think you need to create a window definition for it and add it the users acesss group.
Hi, Paul.
Sounds like you're talking about REST API. And that your are overwriting data with older values if B managed to read record before A finished to update it. Classic conflict resolution ...