Currently, I’m using
<div id="fb-root"></div>
<script src="http://connect.facebook.net/en_US/all.js"></script>
<script>
FB.init({
appId: '214620658601362',
cookie: true,
status: true,
xfbml: true,
oauth: true
});
$(function() {
$("#login").click(function() {
FB.login(function() {
alert('logged in');
}, {
scope: 'publish_actions'
});
});
});
code to get authenticated into my dummy application. Problem is that my friend see the old permissions dialog, it means he can’t approve my application’s “publish_actions” permission. I see the new one. When I try to publish action, error appears:
FB.ApiServer._callbacks.f3209b810({"error":{"message":"(#200) Requires extended permission: publish_actions","type":"OAuthException"}});
however, it works for me
My friend (wrong one):

Me (correct one):

am I missing something in my login code?
The second screenshot is a dialog which hasn’t launched for every application/user; if your friend enabled the Timeline beta as a developer, he’d likely be seeing the new dialog.
It’s not clear if he’s a developer of the app you’re trying to authorize; if so, it makes it even more likely.