The permissions installer states the following: "storage": { 212 app: DENY_ACTION, 213 privileged: DENY_ACTION, 214 certified: ALLOW_ACTION, 215 substitute: [ 216 "indexedDB-unlimited", 217 "offline-app", 218 "pin-app" 219 ] 220 } In the permission matrix, it says it should be ALLOW_ACTION for all apps (and none for web content). I'm pretty the PermissionsInstaller needs to be updated here to reflect the matrix.

I'm not actually sure what to do with this permission. Right now I believe we implicitly grant this permission to all apps when they are installed, whether they list "storage" in the manifest or not. It'd be hard to require this to be added to all manifests given that we have so many floating around already.

If these are internal permissions that you don't need to ask for, can we just remove storage from the matrix entirely? Is there a use case for put 'storage' in a manifest ever?

The intent was that you wouldn't get these permissions if you didn't.

Jonas is going to file a separate bug to have versions in manifests. That will allow us to make compatibility-breaking changes to this sort of thing in the future.

http://mxr.mozilla.org/mozilla-central/source/dom/apps/src/PermissionsTable.jsm#204 looks like this has been fixed.

Works for me actually - this was fixed in a different patch by Fabrice. Thanks for closing this though.