177
edits
Changes
m
=== Management / granting of API permissions to WebApps ===
# User should be able to view / control / modify permissions granted to WebApps
# WebApps should fail gracefully if not all permissions granted
# User should have control over APIs with privacy implications
# User should be able to audit usage of permissions (this is different from viewing what permissions an app has, since that does not tell you how or when it is used)
# Apps must not request permission to do something or use a function that it has not declared that it needs to do. ('''TBD: If an app attempts to execute a function which the user has not authorised, what action should be taken? terminate the app? remove it? report it?''')
discussion links:
# https://groups.google.com/forum/#!topic/mozilla.dev.b2g/AQYPkIjKxjE
no edit summary
== Requirements ==
== Proposals ==
= Permissions Definitions and Presentation =
This section discusses the actual permissions to be enforced, and how and what should be presented to the user., including the management, and the implications at the application level (if permissions are or are not granted) == Scope ==
== Requirements ==
=== Management / granting of API permissions to WebApps ===
# User should be able to view / control / modify permissions granted to WebApps
# WebApps should fail gracefully if not all permissions granted
# User should have control over APIs with privacy implications
# User should be able to audit usage of permissions (this is different from viewing what permissions an app has, since that does not tell you how or when it is used)
# Apps must not request permission to do something or use a function that it has not declared that it needs to do. ('''TBD: If an app attempts to execute a function which the user has not authorised, what action should be taken? terminate the app? remove it? report it?''')
discussion links:
# https://groups.google.com/forum/#!topic/mozilla.dev.b2g/AQYPkIjKxjE
===Management of Permissions===
#A user can modify the permissions granted to a Web App at any time including granting or revoking privileges
