Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

macOS wants access to your Google account

Just updated to Mojave 10.14.4. The only previous connection between any Google accounts I have and my Apple world is sharing my Google calendar with my Apple calendar (I can see on all my devices).


Now I'm getting a request in Mac OS calendar to enter the password for the Google account. "Google requires completing authentication". The pop-up opens safari and takes me to a page that says macOS wants the ability to do all of these (no pick-and-choose possible):


  • Read, compose, send, and permanently delete all your email from Gmail (not necessary - I don't use Apple mail on the Mac for access to my Gmail)
  • See, edit, download, and permanently delete your contacts (um, no. In any case, my contacts are already in iCloud)
  • See, edit, share, and permanently delete all the calendars you can access using Google Calendar (this is what I'm looking for, although I really just want to "see". The rest is unnecessary)
  • View and send chat messages (not needed)


My only choices at this point are to allow this full access or cancel (and then have to deal with being asked again).


Is there a way to get my Google calendar events to show up in my Apple calendar like it did previously and not allow access to everything else? Can I just leave it be? If the latter is true, any way of getting rid of the prompts to enter the password?




MacBook Air 13", macOS 10.14

Posted on Apr 5, 2019 7:28 AM

Reply
Question marked as Best reply

Posted on Apr 12, 2019 6:20 AM

The number of very unhelpful (derogatory honestly) comments and statements here is beyond belief.


The bottom line is that when Apple releases an update to macOS they NEED to provide their loyal base details about what's IN the update! We WANT security updates, but if they keep surprising us with changes...we're going to be much LESS likely to take these updates.


I don't care about the details of the security fixes being included in the documentation, as Apple has always been cagy about detailing those. However, if you're going to introduce or include a NEW feature...they need to provide documentation so we are prepared to deal with the change.


For those who get blind sided by this issue the SOLUTION to is is to head over to System Preferences and uncheck the 'Safari Autofill' option under Touch ID as shown. Life returns to normal.




Similar questions

53 replies

Apr 23, 2019 3:18 PM in response to JorgeB2

Its a shame you used your first post in the forum to hijack someone elses thread, then criticise the answers without offering a better one. Then you had a go at me personally.

I think you broke most of the rules of etiquette on here, but welcome to the forum anyway and I hope you get an answer you like.

Apr 24, 2019 6:55 AM in response to LD150

No hijacking occurred. No personal attack occurred. You have offered an answer that "it is google's fault", however, most people don't think this is the case. Like others on here, I'm looking for a solution. Offering "I hate google" responses is not helpful in finding a solution to a potential security flaw in MacOSX asking for elevated / unnecessary privileges.

Apr 24, 2019 7:36 AM in response to LD150

Jeez @peter_watt idk how you do it! I can’t even begin to comprehend how much you REALLY deal with that on a daily basis!! I applaud you Sir & doing it ever so graciously. Nowadays all that most people want to do is sabotage the next person instead of encouraging and supporting them. People need to stop being so selfish and more SELFLESS!

Apr 24, 2019 8:01 AM in response to JorgeB2

From what I have gathered, Mojave is now using proper OAuth2 authentication, thus requiring the login via Safari, like if you were on your iOS app.


The level of access for deleting contacts, calendar, etc, are expected depending on the settings you configured in your Mail account setup. If you are not comfortable with these, the option is to use another mail client, or setup Gmail as a standard imap email account.


Also for reference: https://support.google.com/mail/thread/3965081?hl=en

Apr 24, 2019 8:03 AM in response to JorgeB2

FWIW, the macobserver article deals with accessing GMAIL via Apple Mail. My original issue here had to do with neither - I had Google calendars that appeared in Apple's calendar.


I ended up deciding I didn't really need access to these calendars within the Apple calendar anymore and removed them (the calendars still exist in Googleland - I just don't pull them in now). I don't get the bothersome message anymore.


Apr 24, 2019 10:09 AM in response to LD150

I can see you post a lot on this forum, and likely provide many good answers and help to people. I am sure it is appreciated.


I am not trying to attack you in any way. I know a bit about OAuth2 having implemented the same in many corporate environments.


It's Mac OS who is asking for OAuth2 authentication.

It's Mac OS that is asking for privileges it does not need.


These requested privileges Mac OS does not need should raise concerns to users. However, this is how Apple chose to integrate with the google OAuth2 API - requesting max privileges. Apple should review this policy.


In short, if you want to use gmail with Mac mail, you have no choice but to grant these privileges, or connect to gmail via standard iMap (which is less secure, although still encrypted).


Keep up the good work Peter.


May 1, 2019 7:46 PM in response to JorgeB2

my first post - at the risk of 'patronising' peter I have to state that he does not seem to understand how awfully he comes over.... as senior on this site his attitude is very confrontational and less than charitable. I just wanted you to know (JorgeB2) you are not alone in questioning the somewhat aggressive and condescending communication style adopted by Peter...


I read through all the threads and I also am wondering how to autosync my iphone and mbp calendars without giving such power to macOS ...


regards

May 4, 2019 10:54 AM in response to LD150

It is a matter of security and whom one choses to trust. The less devices/parties with access to your data, the lower your attack vectors from potential attacks. Some choose to trust Apple over Google. That is a personal choice. Others choose Google as their preferred. In the end, the option should be up to the user, not to an entity.


Apple Store implements very strict policies on Apps to not request more access than they require for proper operation. They have not followed this same policy in Mac Mail integration to Gmail services. As a result, if you authorize the Gmail integration and your Mac is compromised, so is your info on Google. And if all you wanted to do was sync your calendars, this is a concern for any security minded person. This is a new integration for Mac OS, and they likely chose the quickest, most cost effective method by requesting full access. Apple can remedy this by requesting access to only the services the user has requested.

May 4, 2019 1:39 PM in response to LD150

I think the chances of someone wanting access to calendar but not gmail or vice versa are very small, but indeed feasible.


(raises hand). I don't use Mac Mail on MacOS, so there is no need to give it access to my GMAIL account. I do occasionally need to integrate with a Google calendar because I get involved in community activities and Google is usually the choice for the organizational calendar.



May 4, 2019 3:11 PM in response to jjkraw

Maybe don’t add your Google email account to Mail then? Don’t see how “it” could get to your mail then.


Browsers are a bigger threat as Google (and MS) offer you the full suite with one sign-in. I made a point of signing out of Google after accessing contacts etc.

Yes I do trust Apple more. I’m not ashamed.

macOS wants access to your Google account

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.