I really could not understand why on some Facebook objects (being more specific: user posts) the Graph API returns false when using an access_token obtained via OAuth by an application, but NOT by using a user access_token.
I have an example here:
https://graph.facebook.com/10150158049595775?access_token=XXXXXXXXXX
This post is public, and I have no friends in common with this user.
If you try to access the url above by using a token obtained via the usual Facebook OAuth scheme, the server return "false".
If you use your user access token, for example the one that FB gives you by visiting the examples in this page http://developers.facebook.com/docs/reference/api/, the Graph API correctly gives you the users's post detail.
I believe it's not a matter of extended permissions required, first because the post above is public, and second, because for testing I've tried to make my application generate a token by asking ALL user permissions (yes, all permissions found on developers.facebook.com/docs/authentication/permissions/) and the answer was always "false".
See Question&Answers more detail:
os 与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…