Live data from Hacker News

I was annoyed with sites asking for too many Facebook privileges and made this

github.com

11–20 of 146 posts

Re: I was annoyed with sites asking for too many Facebook privileges and made this

#11
This is a cool idea, but of course the warning is that if you are turning off certain permissions, there is a good chance the app you are adding is going to break since it's coded expecting certain behaviors from the API based upon those permissions being granted (even if the data is not going to be used.)

Re: I was annoyed with sites asking for too many Facebook privileges and made this

#12
Typical Facebook authorization: Give us permission to post on your wall, check out all your friends, and generally keep tabs on your entire life. Oh yeah, and allow us to verify that you are logged in to your Facebook account.

Typical Google authorization: Allow us to verify that you are logged in to your Google account.

Re: I was annoyed with sites asking for too many Facebook privileges and made this

#14
post #7

i've just started working with the facebook api over the weekend to integrate into an app i've built and every permission requested has a checkbox next to it on facebook's auth dialog to allow the user to reject it. http://i.imgur.com/v4jAU.png are those apps using a different api than the open graph? i don't see any setting in my app's page on facebook to allow those to be disabled (not that i would prevent users fr…

It looks like there's a "new" auth window in beta: https://developers.facebook.com/docs/beta/authentication/

Re: I was annoyed with sites asking for too many Facebook privileges and made this

#16
Does this actually work? I mean, wouldn't the application just go ahead and use those privileges anyway, since it was built into the API? I think this just makes you aware of the privileges it intends to use, and doesn't actually affect what the application can and cannot do.

I'd love it if somebody could prove me wrong, though. This would be swell if it worked. :P

Re: I was annoyed with sites asking for too many Facebook privileges and made this

#17
post #11

This is a cool idea, but of course the warning is that if you are turning off certain permissions, there is a good chance the app you are adding is going to break since it's coded expecting certain behaviors from the API based upon those permissions being granted (even if the data is not going to be used.)

In other words, it's a good test to see if an app is coded incompetently.

Re: I was annoyed with sites asking for too many Facebook privileges and made this

#18
post #5

Awesome extension! I just wish Facebook would include this as a standard option on the auth page. It would be great to just uncheck the things I don't want it to do on my behalf. Instead I was allowing the app and then editing it's permissions immediately afterward. Great job!

I just wish Facebook would include this as a standard option on the auth page.

Sadly, I believe you misunderstand Facebook's business case.

Re: I was annoyed with sites asking for too many Facebook privileges and made this

#20

Does this actually work? I mean, wouldn't the application just go ahead and use those privileges anyway, since it was built into the API? I think this just makes you aware of the privileges it intends to use, and doesn't actually affect what the application can and cannot do. I'd love it if somebody could prove me wrong, though. This would be swell if it worked. :P

I included a link to the Facebook application settings on the extension's space so you can verify which permissions you've granted and which you haven't.

Basically, when you generate a connect button, you list the which permissions you want to ask for and you get redirected to a page that asks for those permissions. My extension just changes the URL of the popup window so Facebook will be asking for different permissions.

Before yesterday, I've always just done this manually, but I was surprised to learn that people didn't know this trick. So, last night at 10pm I decided to just sit down and finally write it as an extension.

Post reply on HN