Authorization options

Please describe what you did in reproducible steps

In the new Authorization dialog in NSS 5.1.4, there are 4 options that can be selected which equate to different application 'modes':

1. Read all documents in the Pod (Read)
2. Add data to existing documents, and create new documents (Write)
3. Modify and delete data in existing documents, and delete documents (Append)
4. Give other people and apps access to the Pod, or revoke their (and your) access (Control)

So my questions/comments:

• Reading these options, it seems that 2) is a combination of Create and Update, and 3) is a combination of Update and Delete. Why can't a user be set to only have Update access?
• This trusted app information is written to a user's public profile. Seems like this is not information that should be shared publicly. For example, I would not want to publicise that I use an app that is related to a specific medical condition, or an illegal activity. Is there a more appropriate place this information can be written as it should not be public information.

Beginne damit, das für NSS 5.1.4 beschriebene Verhalten des Authorization dialog nachzustellen, und verfolge, wo Informationen zu vertrauenswürdigen Apps im öffentlichen Profil gespeichert werden. Kläre mit den Maintainer:innen, ob Update-only access erforderlich ist und wo Autorisierungsmetadaten liegen sollen; als erledigt gilt die Aufgabe, wenn beide Entscheidungen dokumentiert und das vereinbarte Verhalten implementiert sind.