Working on one of my websites and my programmers have setup the enom API on my website.

The way they have set it up, when a user signs up for an account on our website, the API basically creates a retail sub account for this user at eNom.

Is this correct??? Because the user can even log in at eNom. My concern is that they could register a domain at my site for cheap and then go login at eNom and "push" their domain somewhere else.

Shouldn't the API simply use my reseller id for registering domains even if its through a user of mine?

Any info somewhere on this?

Any help would be appreciated....

I mean how does the API work....

Farouk