The permissions have to be checked somehow. The other typical way to do this is to ask all the permissions when you enable the app, though I sometimes like the

The permissions have to be checked somehow. The other typical way to do this is to ask all the permissions when you enable the app, though I sometimes like the more granular manner that browsers have. Another interesting option would be to allow users to have a more general policy, like "I'm OK with any app reading my Twitter stream, but not with allowing them to post"