5 ms·
> “This change removes the “Act on your behalf” note in the consent page if the app is requesting only read permissions against the user account itself.” I thi
by Waterluvian 10mo ago
> “This change removes the “Act on your behalf” note in the consent page if the app is requesting only read permissions against the user account itself.”
I think this blog demonstrates the problem. To a lot of people this is perfectly straightforward. Others might think, “but my GitHub account is where I keep all my private repos.”
When listing access controls, I think most nouns need to very carefully map back to a clear definition, ideally full of examples and bulleted lists of “what this is” and “what this isn’t”
- Uvix 10mo agoYou mean, like in the next two sentences? First "what this isn't": > "If the app is requesting any kind of repository, organization, or enterprise permission (read or write) then the note still appears." And then "what this is": > "This allows applications to sign in users and get their profile information and email addresses (if requested) without undue alarm."