I went to log into this forum using Google OAuth login and was shocked to see that the CKEditor forum app is asking for the following permissions on my Google account:
- View and manage your spreadsheets in Google Drive
- View and manage any of your documents and files in Google Drive
- Manage your contacts
That seems really outrageous. What possible business does CKEditor forum have in that kind of access? The only things that come to mind are all negative :-( Even viewing those things would be too much, IMO, let alone managing them! What if your code to manage my contacts or documents has a bug and deletes them? Do you really want that kind of responsibility? Apologies if there's a legitimate need to have that level of access - if so, it would be good to hear what the need is.
Thanks!
Terry

Thank you for your feedback.
Thank you for your feedback. I understand your doubts and personally I have the same feelings whenever I see aps requesting too many permissions to do simple things. We must have overlooked this, this is definitely not intended.
We'll review this part of code next week, thanks again!
Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+
Thanks
Thanks Wiktor - makes sense.
OAuth login permissions simplified
Thanks again for your report. It was certainly unintentional.
It is fixed now, we require as little permissions as is necessary.
Robert Mikołajuk
PHP Developer, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+
Thanks
Great, thanks Robert!