On Aug 7, 2012, at 8:40 PM, Fabrice Desré wrote: > On 08/07/2012 11:39 AM, ptheriault wrote: >> This is one case where the spreadsheet is a little inadequate I think since >> the permission model is more complex. See the wiki perhaps, though it could >> do with some updates for clarity I think: >> https://wiki.mozilla.org/WebAPI/Security/OpenWebApp >> >> As far as I understand, there are two APIs here: >> >> navigator.mozApps.* -> available to all, install is OS mediated. Is a >> permission needed here at all, since it is the same behavior for all apps. >> From your email it sounds like we don't need a permission for this. >> >> navigator.mozApps.mgmt.* -> Only available to certified apps. .getAll is >> only needed by the home screen/system apps. Even if/when we have other >> marketplace apps, they can use navigator.mozApps.getInstalled() to see their >> apps. Permission is web "apps-manage" and implicit >> (http://mxr.mozilla.org/mozilla-central/source/dom/apps/src/Webapps.js#354). > > That's correct. > >> So I have changed all of the columns to explicit, but added notes to >> emphasize that .install() is OS mediated (which is similar to Explicit >> permission, but there is no actual permission string involved) and also >> noted that .mgmt.* is certified apps only which have the web apps-manage >> permission. That is basically what the wiki says anyways I think. >> >> PS in the spreadsheet there is a mozApps permission in the permission string >> column. Does that actually exist, or is webapps-manage the only permission >> string related to this API? > > This is an error. The only permission used is webapps-manage.
Fixed in the spreadsheet. > > Fabrice > -- > Fabrice Desré > b2g Team > Mozilla Corporation _______________________________________________ dev-webapps mailing list [email protected] https://lists.mozilla.org/listinfo/dev-webapps
