We are aware of the issue with the badge emails resending to everyone, we apologise for the inconvenience - learn more here.

Forum Discussion

randohuman's avatar
randohuman
New member | Level 2
3 months ago

app without permission for contact into

We want our app to just have read/write permission to the app folder for backing up some important data for our app users. We don't care to know personal information like username, email and location of the user but it seems like we cannot unselect the account_info.read permission forcing us to have access to personal information. Am I missing something? 

  • Solved. While the dashboard does force the account_info.read permission, I was able to use the the scope parameter of the oauth2 authorization code flow to request the subset of permissions that we really need   

  • randohuman's avatar
    randohuman
    New member | Level 2

    Solved. While the dashboard does force the account_info.read permission, I was able to use the the scope parameter of the oauth2 authorization code flow to request the subset of permissions that we really need   

  • Greg-DB's avatar
    Greg-DB
    Icon for Dropbox Staff rankDropbox Staff

    Thanks for following up. I'm glad to hear you already sorted this out. Yes, that's correct, while the account_info.read scope is the default/required scope for user-linked app registrations, it is not technically required for authorizations. As you found, you do not need to request it when having users connect to your app; you can request a subset of scopes without it.

     

    For anyone else looking to do the same, refer to the documentation for the "scope" parameter on the /oauth2/authorize page.