Hi David
> I just (started to) try TWITS for the first time (because it is a great > idea and everyone else seems to be having fun with it). Dropbox auth asked > me to approve access to all of my dropbox. I looked at the dropbox API and > saw that there was an alternative permission: app-specific folder only. Is > there a reason not to use that? Or is it something the user (i.e., client) > can choose? > The developer has to choose what level of permission to ask for. Dropbox have added a few more options since I wrote the app. Personally I've got TW files all over my Dropbox and I didn't want to move them all together. For reasons that I'll explain below, the risks of using full Dropbox access are different with TWITS than a normal app. > Actually, I'm not at all sure what the relationship of the TWITS server > to my TW is. I think it is just there to a) provide a starting point for > the user and b) so Dropbox can authenticate the client is running an > approved app and after the auth process your TW never contacts the TWITS > server again? > The TWITS server is actually just a folder in my own Dropbox. It's there to give your browser the html file containing the TWITS app, and takes no further part in proceedings once the app is loaded into the browser. Your stuff never leaves Dropbox and your browser. Best wishes Jeremy > > -- David > > -- Jeremy Ruston mailto:[email protected] -- You received this message because you are subscribed to the Google Groups "TiddlyWiki" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/tiddlywiki. For more options, visit https://groups.google.com/groups/opt_out.

