Today, I tried a demo of Openbravo (web-based ERP) and on its main workspace there were two widgets Google Docs and Google Calendar and they both displayed my Docs and Calendar data from my Google account without my permission.
I checked my settings again and I'm pretty sure that my docs and calender are not publicly shared. I am using Firefox 7.0 and was already signed in Gmail.
Is this the default behavior of Google Docs and Calendar or am I missing some privacy setting?
[EDIT:] I tried it in Google Chrome (version 14.0.835.187) with another Google Account and its the same, Openbravo widget displays my private Google Docs without any explicit permission.