We’re lately facing a weird bug – when users registered to our site (by their facebook account) they required to confirm the app required permissions, but though we ask for User & Friend Permissions (email and user_location), the permission dialog shows only request of the basic permissions. When clicking on the “Preview Auth Dialog” link in the admin panel the dialog looks great, but in the real world our users don’t get the full list of the permissions we require.
Also, the “Default Activity Privacy” are the user default settings though it should appear as “Friends” (as set in the app permissions).
Did anyone faced this problem? (added screen shots of the disaster)
You are confusing Authenticated Referrals with normal login (triggered by your app itself).
Authenticated Referrals is a feature, that ensures all traffic coming to your app directly from Facebook (user clicks on links to go to your app, etc.) will already be authenticated.
The permissions you specify in your app settings are for those and those alone – if you handle login yourself, you have to ask for permissions the usual way, via the scope parameter.
(Facebook recently announced that Authenticated Referrals are deprecated and will be removed shortly, because it was confusing users to much. Even more confusing it seems to be to developers, because this “problem” has come up quite a lot before.)