title: Envelope Sender View
body: <p>I would like to use the REST API to get a URL to open the sender view:</p>
  
  <pre><code>curl --request POST 'https://demo.docusign.net/restapi/v2/accounts/001122/envelopes/33fef057-1111-1111-8e81-5d93739ae4fd/views/sender' --data '{}' -H 'Accept: application/json' -H 'Authorization: bearer xxxxxxx=' -H 'Content-Length: 2' -H 'Content-Type:application/json'
  </code></pre>
  
  <p>Response from DocuSign:</p>
  
  <pre><code>{
    "url": "https://demo.docusign.net/Member/StartInSession.aspx?StartConsole=1&amp;t=888db3ea-1e85-4860-a8e5-e9b37f38d769&amp;DocuEnvelope=29fae057-9213-4485-8e81-5d93739ae4fd&amp;send=1"
  }
  </code></pre>
  
  <p>In our application, I would like to create an envelope in the "created" status with default values and then open the sender view so that the user can complete the envelope and send it.</p>
  
  <p>The end user is not supposed to know the credentials for the authenticating user that I am using to create the envelope and to open the sender view: the url returned by the API contains a token that should work for some minutes.</p>
  
  <p>I have implemented this solution and everything works, but there is something that I was not expecting. I thought that the url returned could be used only to execute a single operation (to send the envelope), but it seems that the user has complete access to the account as if he/she has executed a login.</p>
  
  <p>Is there a way to limit the access just to the sender view for the given envelope?</p>
  
  <p>Thank you,
  Marco </p>