Get one owned product (full formData)
GET/api/v1/products/:id
Required scope: dpp:read. Cross-tenant / unknown id returns 404 (never 403), so the API never confirms a product exists in another tenant.
Request
Responses
- 200
- 403
- 404
- 503
OK
403 — missing scope (FORBIDDEN_SCOPE) or module (FORBIDDEN_MODULE).
404 — not found OR owned by another tenant (NOT_FOUND; IDOR-safe).
503 — the API is not enabled on this environment (FEATURE_DISABLED).