Unfortunately the way that Twitter's OAuth works, at least when I dove into it a few months ago, is that if you ever want to send out a Tweet on anyone's behalf (for totally legitimate reasons, with user permission etc), you have to request write permission from everyone. And whatever choice you make now, you're basically stuck with, for a variety of reasons. This is why the vast majority of apps decide to ask for both read and write access even if they don't need/want it right away.
Nice! How does that handle upgrading the permissions later? That was one of the big problems I ran into before: that we requested read access and then to get write access we had to have users first revoke permissions and then grant them again (a nonstarter.)
