Have any of you successfully used the Vendor REST API?
I looked at the permissions table compared tot eh values for the privilieges() function and noted that the correct permissions are not in the database. Plus it doesn't look like they are used anywhere else in the code.
Specifically: manage_stores is not listed in cscart_privileges table