4 ms·
> Are these permissions strictly enforced? Yes, each of those items corresponds to an OAuth scope. If you try to make an API call for data that isn't covered b
by Alex3917 8y ago
> Are these permissions strictly enforced?
Yes, each of those items corresponds to an OAuth scope. If you try to make an API call for data that isn't covered by the OAuth scopes you have access to, you'll just get an error.
Developers can add broader OAuth scopes to their apps at any point, but if they do then all their users will need to re-authenticate and will see that the app now requires additional permissions.
C.f.: https://developers.google.com/gmail/add-ons/concepts/scopes https://developers.google.com/gmail/add-ons/concepts/scopes