See every permission before an app gets in
Review app permissions lists each scope in plain words with its code. Install stays disabled until you tick that you allow this access, and a new version that wants more has to ask again.
Review app permissions · Rider Sync
Rider Sync 1.4.0 · Kathmandu Pixel Works
- read:orders
- View your orders
- read:customers
- View your customers
- manage:storefront
- Add and change storefront content
- ☑
- I allow this app the access listed above.
Install log
- Install app stays off until the box is ticked Waiting for consent
- Three scopes granted to Rider Sync Installed
- Version 1.5.0 asks for one more scope Approval needed
In short
Before a partner app is installed, the Review app permissions screen lists everything it will be able to do, such as View your orders (read:orders). The merchant must tick I allow this app the access listed above before Install app works, and a later version that asks for more scopes needs a fresh approval.
The problem it solves
An app that silently gets full access to your orders and customers is a risk you cannot see. Merchants need to read the list, and developers need a list short enough to be read.
How it works
4 steps, start to finish
-
1
The app declares its scopes
Developers pick scopes in the submission; merchants see exactly this list.
-
2
Read the list
Each scope is shown as a plain sentence followed by its code.
-
3
Allow and install
Tick I allow this app the access listed above, then Install app, or Cancel.
-
4
Approve changes
When an update asks for more access, you Update or Cancel before it gets it.
In detail
What install consent does for you
-
Plain words
View your orders, View your customers, Add and change storefront content.
-
And the code
read:orders, read:customers, manage:storefront beside each line for anyone who checks.
-
Tick to install
The install button stays disabled until you agree.
-
Payments are elevated
manage:payments is marked elevated and denied by default.
-
New scopes ask again
A version that wants more access waits for your approval.
-
Scopes such as read:orders, write:orders, read:customers, write:customers, read:content, read:employees, read:media and manage:storefront. manage:payments is elevated and denied by default.
-
You are asked to approve the new scopes; until you do, the app keeps only what you allowed.
-
Partner apps always do. Remote apps that connect through their own sign in show the same list on their listing, What this app can access, before you authorize.
Install consent · Free to start
Try install consent on your own business
Set up in a couple of minutes. Your catalogue, orders and books stay yours to export.
- Live in 2 minutes
- Free to start
- No credit card
