Can't get private/friend-only data

Is there a way for users to grant permissions?
Run with a specific account's permission (everyone friends that account)?
Get online state from Dota APIs? http://dev.dota2.com/showthread.php?t=58317

http://dotabuff.com seems to be able to...?
