Maybe she didn’t do it directly, but by giving permissions to a Facebook app provider she was the enabler.