# How a SOLID app can have persistent access to all the pods of the users who registered to the app? **URL:** \ **Category:** Solid App Development FAQs\ **Created:** [April 10, 2020, 5:46pm UTC](https://forum.solidproject.org/t/how-a-solid-app-can-have-persistent-access-to-all-the-pods-of-the-users-who-registered-to-the-app/2880 "2020-04-10T17:46:28Z")\ **Posts on this page:** 5\ **Page:** 2
**Author:** ![Athina](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@Athina](https://forum.solidproject.org/u/Athina)\ **Post date:** [April 25, 2020, 1:42pm UTC](https://forum.solidproject.org/t/how-a-solid-app-can-have-persistent-access-to-all-the-pods-of-the-users-who-registered-to-the-app/2880/21 "2020-04-25T13:42:00Z")
Thank you for your answer. I still don’t get why A should define in his pod that he trust the app, if the app doesn’t want to write/read anything from A’s pod. Only A wants to read B’s pod and do that through the app. ---
**Author:** ![Athina](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@Athina](https://forum.solidproject.org/u/Athina)\ **Post date:** [April 25, 2020, 1:44pm UTC](https://forum.solidproject.org/t/how-a-solid-app-can-have-persistent-access-to-all-the-pods-of-the-users-who-registered-to-the-app/2880/22 "2020-04-25T13:44:14Z")
Hi and thank you for your answer. So if it is possible to make an application that a user can use to read data from anothers user pod suppose B. It is possible but it is based on a backdoor/bug of solid software? ---
**Author:** ![walter.almeida](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/walter.almeida/32/1974_2.png) [@walter.almeida](https://forum.solidproject.org/u/walter.almeida)\ **Post date:** [April 25, 2020, 2:03pm UTC](https://forum.solidproject.org/t/how-a-solid-app-can-have-persistent-access-to-all-the-pods-of-the-users-who-registered-to-the-app/2880/23 "2020-04-25T14:03:47Z")
> [@Athina](#): > > still don’t get why A should define in his pod that he trust the Oh yes I see what you mean. However, for my understanding (I am new with SOLID you might want to double check !), if the app makes a request to read data from A, the request will come with the origin of the application and therefore it will be checked by the solid server to see if this origin is allowed in user A’s POD. Because the reading occurs in the context of an application. ---
**Author:** ![A\_A](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/a_a/32/786_2.png) [@A\_A](https://forum.solidproject.org/u/A_A)\ **Post date:** [April 25, 2020, 2:05pm UTC](https://forum.solidproject.org/t/how-a-solid-app-can-have-persistent-access-to-all-the-pods-of-the-users-who-registered-to-the-app/2880/24 "2020-04-25T14:05:51Z")
> [@Athina](#): > > I still don’t get why A should define in his pod that he trust the app, if the app doesn’t want to write/read anything from A’s pod. Only A wants to read B’s pod and do that through the app. Because the app acts on A’s behalf. For instance, it could write a fake comment on B’s file, send a wrong IBAN so B transfers money to the wrong account, etc. And even if it’s only reading from B’s account, it could also copy and misuse sensitive information to a third party server. And any of these actions would be done with A’s permission. (And I still don’t know if A needs to define it as a trusted app or B) ---
**Author:** ![walter.almeida](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.solidproject.org/walter.almeida/32/1974_2.png) [@walter.almeida](https://forum.solidproject.org/u/walter.almeida)\ **Post date:** [April 25, 2020, 2:07pm UTC](https://forum.solidproject.org/t/how-a-solid-app-can-have-persistent-access-to-all-the-pods-of-the-users-who-registered-to-the-app/2880/25 "2020-04-25T14:07:00Z")
> [@Athina](#): > > Hi and thank you for your answer. So if it is possible to make an application that a user can use to read data from anothers user pod suppose B. No, it is not possible for an application to make unauthorized access to other users PODs, it is only possible through this back door for an application to make unauthorized access to the user POD of the user who is currently connected. It just gets arround apps authorization, not user authentication. Am I being clear ? [Previous page](https://forum.solidproject.org/t/how-a-solid-app-can-have-persistent-access-to-all-the-pods-of-the-users-who-registered-to-the-app/2880.md?page=1)