An Extender case came up recently where the customer was having security issues with Extender forms. To solve the issue, we needed to determine which roles have access to particular Extender forms

Go here to read the rest:
Determining Role Access To Extender Objects