[openstreetmap/openstreetmap-website] Minor inconsistency in text/meaning of OAuth read user preferences permission (#1530)

[Tom Hughes]

Well anybody can read api details though you do get a few extra bits of information (the pd flag, home location, language list and message count) if you're authenticated and reading your own details.

It's confusing because there is `/api/0.6/user/N` which doesn't require authentication and `/api/0.6/user/details` which does and requires the `allow_read_perfs` permission as you say but both wind up rendering the same template. The second just defaults the user to the authenticated user but if you hit the first one and are authenticated as yourself you will see the extra details.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/1530#issuecomment-297281861
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20170426/8c6c6588/attachment-0001.html>