What is the best way to set up security for the core service? I'm using BasicHttpBinding at the moment and running the client project on my local PC, which does not have the Tridion CM.
I got the authentication to work by adding my ID to the server & Tridion CM as admin & then used those credentials when calling the core service API.
I can't do that in prod. So what is the best practice? What rights on server & tridion do I need to set up for the account I use when calling the Core Service? I'm a little confused as to what account needs what rights.