On 08/07/2012 11:39 AM, ptheriault wrote:
> This is one case where the spreadsheet is a little inadequate I think since
> the permission model is more complex. See the wiki perhaps, though it could
> do with some updates for clarity I think:
> https://wiki.mozilla.org/WebAPI/Security/OpenWebApp
>
> As far as I understand, there are two APIs here:
>
> navigator.mozApps.* -> available to all, install is OS mediated. Is a
> permission needed here at all, since it is the same behavior for all apps.
> From your email it sounds like we don't need a permission for this.
>
> navigator.mozApps.mgmt.* -> Only available to certified apps. .getAll is
> only needed by the home screen/system apps. Even if/when we have other
> marketplace apps, they can use navigator.mozApps.getInstalled() to see their
> apps. Permission is web "apps-manage" and implicit
> (http://mxr.mozilla.org/mozilla-central/source/dom/apps/src/Webapps.js#354).
That's correct.
> So I have changed all of the columns to explicit, but added notes to
> emphasize that .install() is OS mediated (which is similar to Explicit
> permission, but there is no actual permission string involved) and also noted
> that .mgmt.* is certified apps only which have the web apps-manage
> permission. That is basically what the wiki says anyways I think.
>
> PS in the spreadsheet there is a mozApps permission in the permission string
> column. Does that actually exist, or is webapps-manage the only permission
> string related to this API?
This is an error. The only permission used is webapps-manage.
Fabrice
--
Fabrice Desré
b2g Team
Mozilla Corporation
_______________________________________________
dev-webapps mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-webapps
