Does any user can set values to Entity properties and storage API using Forge app, and if yes can these storages be restricted so that only admins can set values?
My team doesn’t work on entity properties so I’ll get back to you on that one.
Regarding the storage API. Only the Forge app has access to the storage. The Forge app ultimately decides who is restricted in using it.
If the Forge app is designed to restrict access then it will. If the Forge app lets anyone set and use storage then we don’t provide a way to further restrict (as far as I know).
edit: I see you’ve gotten an answer in this other post you’ve made.