There is currently only the access options of Read or Full for REST APIs as it pertains to Control Panel. Other modules also have Read, Write and Modify options.
We have some applications requesting data via Wonde for the Global Lists within Control Panel in order to reference data correctly. Specific example is for ethnicity data - the student manager data includes ethnicity data but only the name (e.g. 'Any Other Asian Background'), not the Common Basic Dataset Code (CBDS) (e.g. 'AOTH') which the applications require. The only way for us to allow this is to give 'Full' access to control panel which seems excessive but there is no other option other than to deny this data field.
A minimum of a 'Read' option for Control Panel through the REST APIs would be a better solution.