Did you get a developer alert "Your app asks for read and write permissions at the same time" and you don’t know what to do?
Well, let’s start with Granular Data Permission (GDP) v3 which splits read (public profile, friend list, email, birthday, likes, etc.) and write permissions (publish_actions, publish_stream, etc.) into two separate dialogs. Users can login to an app and grant read permissions and skip write permissions so they don't have to worry about social spam and still access the application. Many apps do ask both permissions at the same time which is not really necessary.
Facebook thinks that apps that continue to ask for read and write permissions together are creating a bad user experience because (1) users will see two permissions dialogs back to back when they try to log in, and (2) even if users skip the publish permissions, they will be repeatedly asked for it whenever the logout and log back in to an app. Best practice is to ask for write permission when needed, e.g. user tries to share something on Facebook.
This also applies on mobile (native iOS and Adnroid apps). Excluded from GDPv3 are canvas games. Let us know if you have experienced this developer alert.
