Why can't we scope permission for Zotero Connector?

atyshka
When I used Mendeley, the browser extension allowed me to select which websites it was allowed to run on, rather than requiring full privileges. Why can't Zotero Connector do the same? This support article (https://www.zotero.org/support/kb/connector_permissions) seems to imply that full access is necessary for core functionality, but I don't see why.
  • dstillman
    The page explains exactly why:
    The Zotero Connector needs it to detect content on the page and update the save icon with the detected item type (e.g., a book icon for “Save to Zotero (Amazon)”, a PDF icon for “Save to Zotero (PDF)”), as well as to provide advanced features such as automatic proxy redirection and automatic RIS/BibTeX import.
    You don't say what browser you're using, but in Chrome you can configure the Connector to only run on specific sites or on click, but you'd have to add http://127.0.0.1 as an exception or it wouldn't be able to save to the Zotero app. And none of the things listed above will work that way.

    Also from the page:
    No data about the pages you visit is logged on your computer or sent to Zotero servers unless you click the save button
Sign In or Register to comment.