3 ms·
How is this a flaw? Go to your Facebook apps settings and you can disable extended permissions for any app there. The apps are expected to work with only some o
by radagaisus 14y ago
How is this a flaw? Go to your Facebook apps settings and you can disable extended permissions for any app there. The apps are expected to work with only some of the permissions, and they have APIs to check which permissions they have enabled. This is intended.
Edit: There's also an option to edit/disable the extended permissions during the authorization. Docs: https://developers.facebook.com/docs/opengraph/authentication/ https://developers.facebook.com/docs/opengraph/authenticatio... (Permissions section)
- homakov 14y ago> This is intended what is intended here? I am user and I cannot opt-out perms in user interface. So I have to use URL trick. Looks not intended
- radagaisus 14y agohttps://www.facebook.com/settings?tab=applications https://www.facebook.com/settings?tab=applications
- homakov 14y agothanks for the link "This app can:" section with perms configuration is what I want to see on authorize URL.
- mike-cardwell 14y agoDuring the time between granting the permissions, and removing them, couldn't those permissions be abused? The URL modification solution prevents this problem.
- DeepDuh 14y agoExactly what I thought. An app will potentially already have your whole social graph by the time you get to change those settings.
- sp332 14y agoThe social graph is not secret. Apps don't need to ask any permission to get it. https://blog.facebook.com/blog.php?post=197943902130 https://blog.facebook.com/blog.php?post=197943902130
- sp332 14y agoYes, in fact some apps post to your timeline immediately with a message encouraging your friends to add the app.