Thelo
Member
I've noticed that when using the Facebook integration login, Xenforo requests the publish_stream Facebook permission (Facebook.php, function getFacebookRequestUrl), which is shown to the user as a request to "Post to Facebook as me: ForumName may post status messages, notes, photos, and videos on my behalf" when they first log in.
Since requesting this permission looks scary to many spam-wary users, I'd like to know why Xenforo requests this permission, what exactly it does with it, and if there is a safe way to avoid requesting it. According to Facebook (and common sense), there is a strong inverse correlation between the number of permissions requested and the number of people willing to accept them, so if it's not actually useful, I'd like to avoid it.
The current Xenforo Facebook permission requests are: "email,publish_stream,user_birthday,user_status,user_website,user_location"
Facebook has this to say on publish_stream:
Edit: In particular, it doesn't look like publish_stream is necessary for either the Like feature or for logging in through Facebook, so I'm pretty puzzled as to what exactly it does for Xenforo...
Since requesting this permission looks scary to many spam-wary users, I'd like to know why Xenforo requests this permission, what exactly it does with it, and if there is a safe way to avoid requesting it. According to Facebook (and common sense), there is a strong inverse correlation between the number of permissions requested and the number of people willing to accept them, so if it's not actually useful, I'd like to avoid it.
The current Xenforo Facebook permission requests are: "email,publish_stream,user_birthday,user_status,user_website,user_location"
Facebook has this to say on publish_stream:
Facebook developers reference: Permissions said:publish_stream:
Enables your app to post content, comments, and likes to a user's stream and to the streams of the user's friends. With this permission, you can publish content to a user's feed at any time, without requiring offline_access. However, please note that Facebook recommends a user-initiated sharing model.
Edit: In particular, it doesn't look like publish_stream is necessary for either the Like feature or for logging in through Facebook, so I'm pretty puzzled as to what exactly it does for Xenforo...