7 ms·
This looks neat, but should I be concerned about the permissions this is requesting for my account? Bluesky: Manage your profile, posts, likes and follows
by sensen 6mo ago
This looks neat, but should I be concerned about the permissions this is requesting for my account? Bluesky: Manage your profile, posts, likes and follows
- louisescher 6mo agoHi! We're doing that to allow you to update your profile from within the app. Not doing anything else besides that. If you have concerns, take a look at the source code: https://github.com/colibri-social/colibri.social https://github.com/colibri-social/colibri.social
- czbond 6mo agoVery interesting project. From a product uptake perspective, I could suggest that since a user is still building trust when they begin use - to only require as few permissions as needed. I'd punt that profile update requirement out personally for another method later. An example might be when a user has used your app for N sessions, or after N months.
- iamnothere 6mo agoThey should prompt the user for permission when they use a feature that requires it, explain why, and allow them to cancel if desired. Have seen this pattern used many times elsewhere.
- louisescher 6mo agoGood idea, will implement that! Maybe a button or something to refresh your permissions when/if you want to edit your profile via Colibri makes sense.
- verdverm 6mo agoIf that's all you are doing, then narrow the permission set for oauth. No need to have access to posts if you aren't touching them.