macOS wants access to your Google account

Peter

Do you work for Apple? Your answers sound a bit off base to say the least. You obviously have something against google, but you are coming across as someone with authority, and I'm not sure that is the case. No offense intended, but I'm looking for a real answer, as this is a bit concerning.

Its a shame you used your first post in the forum to hijack someone elses thread, then criticise the answers without offering a better one. Then you had a go at me personally.

I think you broke most of the rules of etiquette on here, but welcome to the forum anyway and I hope you get an answer you like.

No hijacking occurred. No personal attack occurred. You have offered an answer that "it is google's fault", however, most people don't think this is the case. Like others on here, I'm looking for a solution. Offering "I hate google" responses is not helpful in finding a solution to a potential security flaw in MacOSX asking for elevated / unnecessary privileges.

Jeez @peter_watt idk how you do it! I can’t even begin to comprehend how much you REALLY deal with that on a daily basis!! I applaud you Sir & doing it ever so graciously. Nowadays all that most people want to do is sabotage the next person instead of encouraging and supporting them. People need to stop being so selfish and more SELFLESS!

From what I have gathered, Mojave is now using proper OAuth2 authentication, thus requiring the login via Safari, like if you were on your iOS app.

The level of access for deleting contacts, calendar, etc, are expected depending on the settings you configured in your Mail account setup. If you are not comfortable with these, the option is to use another mail client, or setup Gmail as a standard imap email account.

Also for reference: https://support.google.com/mail/thread/3965081?hl=en

Gmail access to calendar, contacts, and mail all go through the same gmail authentication. So it is the same reason for why syncing a google calendar to mac calendar now requires Oauth2 authentication.

I can see you post a lot on this forum, and likely provide many good answers and help to people. I am sure it is appreciated.

I am not trying to attack you in any way. I know a bit about OAuth2 having implemented the same in many corporate environments.

It's Mac OS who is asking for OAuth2 authentication.

It's Mac OS that is asking for privileges it does not need.

These requested privileges Mac OS does not need should raise concerns to users. However, this is how Apple chose to integrate with the google OAuth2 API - requesting max privileges. Apple should review this policy.

In short, if you want to use gmail with Mac mail, you have no choice but to grant these privileges, or connect to gmail via standard iMap (which is less secure, although still encrypted).

Keep up the good work Peter.

“In short, if you want to use gmail with Mac mail, you have no choice but to grant these privileges, .....”

Is no different from what I stated page 1. Its a Google requirement and not a problem. Its not a security risk.

Try to state your arguments without patronising others on the forum.

my first post - at the risk of 'patronising' peter I have to state that he does not seem to understand how awfully he comes over.... as senior on this site his attitude is very confrontational and less than charitable. I just wanted you to know (JorgeB2) you are not alone in questioning the somewhat aggressive and condescending communication style adopted by Peter...

I read through all the threads and I also am wondering how to autosync my iphone and mbp calendars without giving such power to macOS ...

regards

Again, Shahid and JorgeB2, thats a Google generated graphic.

Remember YOU are MacOS in this case. Its a tool not an entity.

You are not giving “Apple” access to anything, just giving your Mac access.

You should me more concerned about what data you continue to share with Google.

It is a matter of security and whom one choses to trust. The less devices/parties with access to your data, the lower your attack vectors from potential attacks. Some choose to trust Apple over Google. That is a personal choice. Others choose Google as their preferred. In the end, the option should be up to the user, not to an entity.

Apple Store implements very strict policies on Apps to not request more access than they require for proper operation. They have not followed this same policy in Mac Mail integration to Gmail services. As a result, if you authorize the Gmail integration and your Mac is compromised, so is your info on Google. And if all you wanted to do was sync your calendars, this is a concern for any security minded person. This is a new integration for Mac OS, and they likely chose the quickest, most cost effective method by requesting full access. Apple can remedy this by requesting access to only the services the user has requested.

Maybe don’t add your Google email account to Mail then? Don’t see how “it” could get to your mail then.

Browsers are a bigger threat as Google (and MS) offer you the full suite with one sign-in. I made a point of signing out of Google after accessing contacts etc.

Yes I do trust Apple more. I’m not ashamed.

its not google who is asking , its Mac OS . when i accepted google sent me a message that someone allowed Mac OS to connect to my google account and if it was me or not . I did but then i changed my mind and unauthorized them . when mac asks me to do that from now on i simply ignore it