Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Today, I tried a demo of Openbravo (web-based ERP) and on its main workspace there were two widgets Google Docs and Google Calendar and they both displayed my Docs and Calendar data from my Google account without my permission.

I checked my settings again and I'm pretty sure that my docs and calender are not publicly shared. I am using Firefox 7.0 and was already signed in Gmail.

Is this the default behavior of Google Docs and Calendar or am I missing some privacy setting?

[EDIT:] I tried it in Google Chrome (version 14.0.835.187) with another Google Account and its the same, Openbravo widget displays my private Google Docs without any explicit permission.

share|improve this question
up vote 3 down vote accepted

Looks like they are using iframes to pull in content. You can browse directly to these sites:

I think Openbravo is taking advantage of the fact that you are more likely to have a Google account and be logged on than not. They attempted to do the same with Facebook just below the Calendar widget, but I don't have a Facebook account so it just says "Connect with Facebook".

Don't worry, no one at Openbravo has access to your Google account.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.