## **Repository**

https://github.com/emre/dpoll.xyz

## **Components**

SteemConnect Revoke feature/button on the dpoll front-end

## **Proposal description**

[Dpoll](https://dpoll.xyz) is a decentralized poll application build on steem blockchain. It is primarily used to get public opinions/feedbacks on any subject within steem ecosystem. It offers a  comprehensive polling experience like other conventional poll based platforms like [Polldaddy](http://polldaddy.com/), [Surveymonkey](http://www.surveymonkey.com/), [Zoomerang](http://www.zoomerang.com/), etc where people can easily create polls and vote on polls created by others, too. The only difference is the fact that dpoll is blockchain based; so data stored on it is immutable and permanent which is unlike the other poll applications. 

Like other steem based DApps, dpoll uses [steemConnect](https://app.steemconnect.com) security layer to allow users access to its platform. So once you login via steemConnect, your account is safe because neither steemConnect nor the authorized dpoll stores your keys.

However, even though it's safe to access steem DApps via steemConnect, the fact remains that once you do, you are also delegating posting and upvoting authority to that particular steem DApp. This can be exploited by malicious actors to carry out upvoting/downvoting operations without your consent. 

As an example, there was a case of [automated vote abuse](https://steemit.com/steemconnect/@busy.org/automated-votes-abuse-on-steemconnect) that occurred with with utopian-io account some months back in which many steemians' posts were either upvoted or downvoted. 


Based on the fact that many steemians don't even know how to revoke such permission, I therefore suggest that a **Revoke feature/button** be built on dpoll platform in an easily accessible spot. This will provide a seamless means of revoking such delegated authority once one is through with using the platform. 

## **Mockups/examples**

Such **Revoke Access feature/button** should be built in the manner similar to the below image. 

<center>![1553606248474.jpg](https://cdn.steemitimages.com/DQmNY7pfg7uDw5DM3NZSQ2RpJfwq3nDppV3ehnV5WoVAYCd/1553606248474.jpg)</center>

Again, it is very easy to access profile page in most applications. So, I suggest the **Revoke Access feature/button** be built on the profile page of dpoll DApp in the position indicated in the below image. 

<center>![1553606998000.jpg](https://cdn.steemitimages.com/DQmPfJpPGjmULjt7ngUdsH882yzpnLRdBrXHRtGkGkPuT8a/1553606998000.jpg)</center>

## **Benefits**

* The case of unauthorized use of posting and voting permissions will never happen again. 

* Even when it's clear neither steemConnect nor any steem DApp store your keys, some less informed people could think otherwise. When the utopian-io issue occurred, a steemian that informed me about it did so in a way that portrayed utopian in bad light. The possibility of such development arising shouldn't be given any chance.  So, by building such feature, possible cases of such misconception and wrong information dissemination will not arise. 

* People will feel more secure and confident.

## **My Github Profile**

https://github.com/sciece-tech