Report question

Question: OAuth design for API without users permission