[openstreetmap/openstreetmap-website] Add allow_read_email oauth permission (#1431)

[Andy Allan]

I'm going to [put my head above the parapet](https://dictionary.cambridge.org/dictionary/english/put-your-head-over-above-the-parapet), and decline this pull request. It's been a couple of years without any clear progress, policy or otherwise, and the PR has bit-rotted too.

But more importantly, I don't agree with the idea. There could be several aims with third-party applications wanting to gain email addresses - linking third-party accounts, dis-intermediating OSM, address harvesting, or whatever. But lets stick to the simple use-case of contacting our mappers for legitimate reasons. In this case, I would prefer to see an oauth permission to allow third-party apps to message our users, through our API, rather than take their email addresses and [going to town](https://www.collinsdictionary.com/dictionary/english/go-to-town) with them. 

That would leave OSM(F) with at least some mechanism to step in and protect our mappers from messaging overload, in case of any problems with the way the third-party behaves. It might seem obvious to many people the difference between OSM emailing them, vs a third-party application emailing them, but I don't think that's clear to everyone. ("I signed up for OSM and I'm using your app and now you are spamming me please stop" etc)

If the third-party really really needs an email address from our mappers and can't possibly live without it (e.g. for account linking), then they should ask for the user to provide it directly to them instead.

So to reiterate, I would prefer to see an oauth permission to allow third-party apps to message our users, through our API, rather than handing out their email addresses.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/1431#issuecomment-454794739
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20190116/8e94717c/attachment.html>