Why's this on you wanting to access our Paypal before we post our website for sale thread? Is there a reasoning behind it? I'm just thinking of marketplaces like Flippa.
Yep... That's what the account linking gets. There are no permissions to take money out if that's what you are thinking. When you are dealing with close to a million users, you'd be surprised he many type their email wrong or change their email after the fact and get made when a buyer sent money to the wrong email address. Basically the API link prevents that since you take out human error and future email changes from the equations of problems.
I personally love the feature. It's nice too see the balance change in the corner too... makes me feel all fuzzy inside.
I agree that all of the points are normal. The points of concern were why the forum needs our PayPal balance, and why does the forum need to authorize transaction?
Because the forum shows you the balance in your info top right, and because the forum uses the transaction info to verify that payments have been made, to be able to change status on items.
1. Why does it need to show my balance anyways? 2. It already has "obtain info about a transaction" and "search for transactions" but why does it need to send money on my behalf?
There is no permission that allows it to send money on your behalf. "Authorize and Capture" your transactions is payment industry speak for pre-authorizing a transaction TO you and then completing it later. There are other areas of the site that use that function (Digital Point Ads for example if you were receiving payments as an ad publisher). I assume if you click on the "What's this?" link for that permission, it will tell you what it's about. If you want more technical details about what each permission allows, you can find it broken down here: https://developer.paypal.com/docs/classic/permissions-service/integration-guide/PermissionsAbout/ And specifically details about the Auth/Capture stuff... https://developer.paypal.com/docs/classic/admin/auth-capture/ Either way, there is no permission to extract funds FROM your account, only read info about the account and authorize payments TO it.