title: Use of Facebook "user_photos" permission
body: <p>We are currently working on a project which aims to <strong>minimize fraud in our e-commerce platform</strong>. In particular we seek to avoid fraud of users with <strong>multiple accounts</strong> (same human behind those accounts).</p>
  
  <p>To address this problem we are designing a mechanism intended to <strong>verify the identity</strong> of users who have multiple accounts. <strong>This mechanism will apply only to users with risky behavior within our platform.</strong></p>
  
  <p>The mechanism consists on asking the user to connect with his Facebook account and grant certain permissions to our application, which allow us to verify the veracity of his account.</p>
  
  <p>We will require the following:</p>
  
  <ul>
  <li>That his account has more than 50 friends.</li>
  <li>That his account has activity over 6 months ago.</li>
  <li><strong>That the user can correctly identify the face of 5 friends. (similar to Facebook Social Captcha)</strong></li>
  </ul>
  
  <p>To achieve this our Facebook application needs the following permissions:</p>
  
  <ul>
  <li>user_friends</li>
  <li>email</li>
  <li><strong>user_photos (requires review of the application)</strong></li>
  </ul>
  
  <p>We do not want to start developing this mechanism without being sure that Facebook will approve “user_photos” permission.</p>
  
  <p>So, our questions are:</p>
  
  <ul>
  <li>Is it possible to use the information in this way?</li>
  <li>Are we going against Facebook policies by doing this?</li>
  <li>Is there any way to ensure that Facebook will approve those permissions to our application before starting development?</li>
  </ul>
  
  <p>Thank you very much.</p>