Preconditions: - Isolating lockscreen as a separate app User story example: - Users can see the today's schedule on Lockscreen. - The lockscreen app is downloaded from MarketPlace. For this, downloaded Lockscreen app need to be able to get the info held by phone (e.g. Schedule of calendar). Two thinkable ways: - WebAPI/DataStore - WebAPI/Inter App Communication WebAPI/DataStore: The every apps which set "datastores-access: {xxx:{...}}" to "manifest.webapp" seem to be able to access xxx datastore. Thus, this is not good for access control. WebAPI/Inter App Communication: There are some rules for access control (minimumAccessLevel, manifestURLs, developers, installOrigins) listed in the callee manifest.webapp. But the rules not useful for downloaded apps because the callee cannot know downloaded apps's "manifestURLs, developers, installOrigins" beforehand. I think new access control like control by app type(e.g. lockscreen) is need. Are there any other ideas?

Beside the data access problem, which way you want to represent your calendar (schedule)? If you want to launch an 'secure app' like the current secure camera, we have already a path to follow. But if you want to integrate the calendar into the lockscreen, in other words, as a 'seamless' window, there is no way to do that yet. This needs a seamless secure window with some layout works which should be handled by the lockscreen. Of course you can directly show the schedule on the DOM elements inside the lockscreen, but maybe we need this to provide a isolation mechanism.

Hi, thank you for response, i will comment. (In reply to Greg Weng [:snowmantw][:gweng][:λ] from comment #1) > Beside the data access problem, which way you want to represent your > calendar (schedule)? I just need calendar info (e.g. "March 19, 2013 11:00-12:00 Meeting at place xxx"). The Lockscreen app create original view with using the info. As you said, a new mechanism seems to be necessary for this. Now I have understood "WebAPI/Inter App Communication" is post type and cannot get the info. So, "WebAPI/DataStore" is available, but this cannot control access. Are there any other available methods ?

This bug will be implemented in 2.1 or later. Because some issues related to switching of downloadable lockscreen apps are under discussion.

Firefox OS is not being worked on