Facebook recommends that you only ask for the permissions needed when needed. I have en Django app with facebook sign in and also a function to post to facebook. At the moment I ask for both permissions on signup using django-social-auth. So in my settings I have:
FACEBOOK_EXTENDED_PERMISSIONS = ["email", "publish_stream"]
FACEBOOK_EXTRA_DATA = [("gender", "username")]
But how can this be split, so on signup I only ask for:
FACEBOOK_EXTENDED_PERMISSIONS = ["email"]
And when the user tries to post to his or her timeline I also ask for:
FACEBOOK_EXTENDED_PERMISSIONS = ["publish_stream"]