Player using problematic API and dropping token into spots that aren't revealed

I have a player in a pathfinder game that is using an api to adjust the size of their token. I thought this was something that only the GM could do. This would be fine if they didn't constantly use it bloat the token to the size of the map as a joke and reveal area's I spent a lot of time fixing for dynamic lighting and huge twists. Similar problem with the player tossing down multiple tokens in random spots on the map. Is there a way to prevent this? Yes, I've tried speaking with them but I'm not sure it's clicking how annoying this is getting. I'll have another word with them, but I'd like these two functionalities removed regardless. Thank you all in advance.

You have a Plus subscription, so the Creator of the game must have a Pro subscription. You should take this up with the Creator of the game. It’s mostly community help here, and there’s not much the community can do for you.  If I was in your place, that player would be kicked out of the game after the second offence. 

Andrew R. said: You have a Plus subscription, so the Creator of the game must have a Pro subscription. You should take this up with the Creator of the game. It’s mostly community help here, and there’s not much the community can do for you.  If I was in your place, that player would be kicked out of the game after the second offence.  This is the weird part, I'm the GM and the person who made the game and the only one with gm access. The player in question is also a basic member of the site. I have no idea how this token thing is happening. Everywhere I search says a player should not be able to do this with tokens, but they are able to somehow. The token dropping is baked in I think though. Players have that access but I was just wondering if that one could be removed.

It's possible to do things like this with non-roll20 methods, like a browser extension. We can't really help you sort that out because by definition, it's not a roll20 problem. There is no way to remove this functionality. If talking with the player is not working, don't assume the player is not getting how annoying it is. Assume instead that they know it's annoying and that is why they are doing it, and that they are pretending they are not getting it as a way to frustrate you enough that you stop interfering with their fun. If you try to talk with them and they aren't getting it, kick them from the game. There are other players.

GiGs said: It's possible to do things like this with non-roll20 methods, like a browser extension. We can't really help you sort that out because by definition, it's not a roll20 problem. There is no way to remove this functionality. If talking with the player is not working, don't assume the player is not getting how annoying it is. Assume instead that they know it's annoying and that is why they are doing it, and that they are pretending they are not getting it as a way to frustrate you enough that you stop interfering with their fun. If you try to talk with them and they aren't getting it, kick them from the game. They are other players. Honestly, both of these responses bring up a good point I should have accepted from the jump. It's less of a site issue and more of a player one. Thank you both for your advice.