{"action":"created","issue":{"url":"https://api.github.com/repos/ShareX/ShareX/issues/3303","repository_url":"https://api.github.com/repos/ShareX/ShareX","labels_url":"https://api.github.com/repos/ShareX/ShareX/issues/3303/labels{/name}","comments_url":"https://api.github.com/repos/ShareX/ShareX/issues/3303/comments","events_url":"https://api.github.com/repos/ShareX/ShareX/issues/3303/events","html_url":"https://github.com/ShareX/ShareX/issues/3303","id":313789055,"node_id":"MDU6SXNzdWUzMTM3ODkwNTU=","number":3303,"title":"Interested in using the app in our schools, but permissions. Argh.","user":{"login":"rasqual","id":24901793,"node_id":"MDQ6VXNlcjI0OTAxNzkz","avatar_url":"https://avatars3.githubusercontent.com/u/24901793?v=4","gravatar_id":"","url":"https://api.github.com/users/rasqual","html_url":"https://github.com/rasqual","followers_url":"https://api.github.com/users/rasqual/followers","following_url":"https://api.github.com/users/rasqual/following{/other_user}","gists_url":"https://api.github.com/users/rasqual/gists{/gist_id}","starred_url":"https://api.github.com/users/rasqual/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rasqual/subscriptions","organizations_url":"https://api.github.com/users/rasqual/orgs","repos_url":"https://api.github.com/users/rasqual/repos","events_url":"https://api.github.com/users/rasqual/events{/privacy}","received_events_url":"https://api.github.com/users/rasqual/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-04-12T15:56:39Z","updated_at":"2018-10-16T19:16:10Z","closed_at":null,"author_association":"NONE","body":"Why full access to Drive? We can't do that for FERPA reasons.\r\n\r\nWhy not:\r\nhttps://www.googleapis.com/auth/drive.file | Per-file access to files created or opened by the app. File authorization is granted on a per-user basis and is revoked when the user deauthorizes the app.\r\n\r\nHeck, I evaluate apps for my own use with the same question: are they requiring the least intrusive permissions, or the most?\r\n\r\nI realize the app is capable of retrieving files it hasn't created and that this is a _feature_. But permitting the app to run with an inability to access remote files it did not create would satisfy our security needs.  It's possible to offer both for approval but make this one optional:\r\n\r\nhttps://www.googleapis.com/auth/drive | Full, permissive scope to access all of a user's files, excluding the Application Data folder. Request this scope only when it is strictly necessary.\r\n\r\nAny chance of this changing? \r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/ShareX/ShareX/issues/comments/430363969","html_url":"https://github.com/ShareX/ShareX/issues/3303#issuecomment-430363969","issue_url":"https://api.github.com/repos/ShareX/ShareX/issues/3303","id":430363969,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMDM2Mzk2OQ==","user":{"login":"stale[bot]","id":26384082,"node_id":"MDM6Qm90MjYzODQwODI=","avatar_url":"https://avatars3.githubusercontent.com/in/1724?v=4","gravatar_id":"","url":"https://api.github.com/users/stale%5Bbot%5D","html_url":"https://github.com/apps/stale","followers_url":"https://api.github.com/users/stale%5Bbot%5D/followers","following_url":"https://api.github.com/users/stale%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/stale%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/stale%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stale%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/stale%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/stale%5Bbot%5D/repos","events_url":"https://api.github.com/users/stale%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/stale%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2018-10-16T19:16:10Z","updated_at":"2018-10-16T19:16:10Z","author_association":"NONE","body":"This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.\n"}}
{"actor":{"display_login":"stale"}}