A: 

only witht he extended permission you can specify via the scope attribut, when obtaining the access token

for ex:

https://graph.facebook.com/oauth/authorize?
    client_id=...&
    redirect_uri=http://www.example.com/callback&
    scope=email
Joe Hopfgartner
But I already use scope=publish_stream,offline_access,email while https://graph.facebook.com/oauth/authorize
skozlovf
then you can simply access it at https://graph.facebook.com/username ... if it isnt there it is not available. or the user has not granted, the user can explicitely partly allow your scope or change his/her mail to a proxy email.
Joe Hopfgartner
very strange.. I checked my and friend application settings - email access is allowed, so it must show email, right? What additional steps me and friens can do?
skozlovf
you can only access the email of the user that has authorized the extended permission for your application himself, not his/her friends
Joe Hopfgartner
Thank you. Very bad (
skozlovf
+1  A: 

Email permission gives access to your email only.

If you look at the extended permissions page it says:

Likewise, to protect the privacy of users who have not explicitly authorized your application, your application will only be able to access the basic profile information about a user's friends, like their names and profile pictures. If your application needs to access other data about a user's friends to enable social functionality, you will need to request some of the special friends permissions listed below.

And if you look at the table below, it says "not available" for email permission for friends.

serg
Thanks. Now it's clear! There is no way to get friends emails!! f**k!
skozlovf