Closed
Bug 768931
Opened 12 years ago
Closed 12 years ago
Each permission in the manifest should support a corresponding "intended usage"
Categories
(Core Graveyard :: DOM: Apps, defect)
Tracking
(blocking-kilimanjaro:?, blocking-basecamp:+)
RESOLVED
FIXED
People
(Reporter: ladamski, Assigned: anant)
References
(Blocks 1 open bug)
Details
(Keywords: dev-doc-needed, feature, Whiteboard: [WebAPI:P0][LOE:S][qa-])
Developers should be able to provide an "intended usage" to describe the intended use of each permission requested and any data obtained.
This should be short to fit in a mobile UI dialog.
Localization is a big challenge. Could we provide a generic set of pre-localized options?
See https://groups.google.com/group/mozilla.dev.webapps/browse_thread/thread/aa0ff6e8ba9742ad/25595a281f08312e?lnk=raot#25595a281f08312e for background
Reporter | ||
Updated•12 years ago
|
Reporter | ||
Comment 1•12 years ago
|
||
Intended usage should only displayed to the user for trusted applications.
Certified applications don't display permission dialogs.
Use of APIs by installed web apps (aka untrusted apps) can't be verified so we should not be displaying untrustworthy 3rd party claims in a trusted system dialog.
Having the rationale for all types of applications can still be useful for reviewers however.
Comment 2•12 years ago
|
||
Would this be a required or optional parameter in the manifest? Would there be an assumed default value if nothing is specified if this is optional?
Comment 3•12 years ago
|
||
I think it should be required; this will cause app developers to at least briefly think about what they will do with the data obtained through having permission.
blocking-basecamp: ? → +
Reporter | ||
Updated•12 years ago
|
Assignee: nobody → anant
Updated•12 years ago
|
Component: General → DOM: Apps
Product: Web Apps → Core
Comment 4•12 years ago
|
||
Anant - Can we get an update on this bug for the spec piece?
Reporter | ||
Updated•12 years ago
|
Blocks: basecamp-permissions
Updated•12 years ago
|
Whiteboard: [WebAPI:P0]
Assignee | ||
Updated•12 years ago
|
Whiteboard: [WebAPI:P0] → [WebAPI:P0][LOE:S]
Assignee | ||
Comment 5•12 years ago
|
||
https://github.com/mozilla/webapps-spec/commit/cdae925cc5b98537164fd9182be9e8827482044a
The property "description" will contain the intended use of the permission.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Updated•12 years ago
|
Blocks: Apps-Dev-Doc-Needed
Updated•12 years ago
|
Whiteboard: [WebAPI:P0][LOE:S] → [WebAPI:P0][LOE:S][qa-]
Updated•12 years ago
|
Keywords: dev-doc-needed
Updated•7 years ago
|
Product: Core → Core Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•