Hacker News new | ask | show | jobs
by squeaky-clean 1359 days ago
When permissions are grouped together like that by bullet, it's usually because Google's API only has 1 scope that covers all those actions (per bullet). My guess is they want to create new events on your calendar?

Looking at the Google Calendar API, it seems like if you want to grant an app the ability to add new events, you need to give permission to view all events and delete events as well.

https://developers.google.com/calendar/api/v3/reference/acl/...

https://developers.google.com/identity/protocols/oauth2/scop...

So it's kind Google's fault for that. Still that's a lot of permissions to request, I'd be uncomfortable even letting them have the ability to add or view events. Does it have a way to work if you don't allow it access to Google Calendar?

2 comments

I think all apps seeing all events is a usability thing. When you try to double schedule something every app can tell you about the conflict.
I would much rather companies just provide a Webcal link rather than mess with my calendar through an API...