In the above example from the Facebook test environment, status can take on one of three values:
1)connected
2)notConnected
3)unknown
These states, according to the API, correspond to the following descriptions:
1) Connected
2) Logged into Facebook but not connected with your application
3) Not logged into Facebook at all.
How does a user go from being 'connected' to an application to not being 'connected'? That is, what are the minimum permissions the user must grant the application?
When a user "connects" with your application, there is a basic set of permissions that are given to your application by default. Here is an image that depicts the permissions given by default to an App:
You can, however, ask for extended permissions listed here: Extended Permissions