From 6b4261ce5408d9655daeb46124767bc7f4a05708 Mon Sep 17 00:00:00 2001 From: Max Risuhin Date: Tue, 28 Jan 2020 14:25:38 -0800 Subject: [PATCH 1/2] Extend Privacy Policy with used Google scopes --- public/static/docs/user-guide/privacy.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/public/static/docs/user-guide/privacy.md b/public/static/docs/user-guide/privacy.md index e0a99f9b4c..809624588b 100644 --- a/public/static/docs/user-guide/privacy.md +++ b/public/static/docs/user-guide/privacy.md @@ -42,6 +42,13 @@ section of this User Guide. ## Scopes +userinfo.email scope (view your email address), userinfo.profile scope (see your +personal info, including any personal info you've made publicly available), and +openid scope (authenticate using OpenID Connect) are required to be used by +Google Auth. DVC authorizes users via +[Google's server](https://accounts.google.com/o/oauth2/auth) and doesn't access +or collect users data used by Google Auth. + DVC allows you to manage your Google Drive files and therefore the default scopes include read/write access to Google Drive. From 54aa80a54bb7866bcf71c010bf110188a7392423 Mon Sep 17 00:00:00 2001 From: Max Risuhin Date: Tue, 28 Jan 2020 14:50:55 -0800 Subject: [PATCH 2/2] Privacy Policy: mention drive.appdata scope. --- public/static/docs/user-guide/privacy.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/public/static/docs/user-guide/privacy.md b/public/static/docs/user-guide/privacy.md index 809624588b..a80f448d3c 100644 --- a/public/static/docs/user-guide/privacy.md +++ b/public/static/docs/user-guide/privacy.md @@ -42,15 +42,16 @@ section of this User Guide. ## Scopes -userinfo.email scope (view your email address), userinfo.profile scope (see your -personal info, including any personal info you've made publicly available), and -openid scope (authenticate using OpenID Connect) are required to be used by -Google Auth. DVC authorizes users via +`userinfo.email` scope (view your email address), `userinfo.profile` scope (see +your personal info, including any personal info you've made publicly available), +and `openid` scope (authenticate using OpenID Connect) are required to be used +by Google Auth. DVC authorizes users via [Google's server](https://accounts.google.com/o/oauth2/auth) and doesn't access or collect users data used by Google Auth. DVC allows you to manage your Google Drive files and therefore the default -scopes include read/write access to Google Drive. +scopes include `drive` scope (read/write access to your Google Drive) and +`drive.appdata` scope (manage configuration folder in your Google Drive). ## Sharing user data