On Tue, Aug 7, 2012 at 11:39 AM, ptheriault <[email protected]> wrote:
> This is one case where the spreadsheet is a little inadequate I think since 
> the permission model is more complex. See the wiki perhaps, though it could 
> do with some updates for clarity I think: 
> https://wiki.mozilla.org/WebAPI/Security/OpenWebApp
>
> As far as I understand, there are two APIs here:
>
> navigator.mozApps.*  -> available to all, install is OS mediated. Is a 
> permission needed here at all, since it is the same behavior for all apps. 
> From your email it sounds like we don't need a permission for this.
>
> navigator.mozApps.mgmt.* ->  Only available to certified apps. .getAll is 
> only needed by the home screen/system apps. Even if/when we have other 
> marketplace apps, they can use navigator.mozApps.getInstalled() to see their 
> apps. Permission is web "apps-manage" and implicit 
> (http://mxr.mozilla.org/mozilla-central/source/dom/apps/src/Webapps.js#354).
>
> So I have changed all of the columns to explicit, but added notes to 
> emphasize that .install() is OS mediated (which is similar to Explicit 
> permission, but there is no actual permission string involved) and also noted 
> that .mgmt.* is certified apps only which have the web apps-manage 
> permission. That is basically what the wiki says anyways I think.

Cool, we are in agreement!

/ Jonas
_______________________________________________
dev-webapps mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-webapps

Reply via email to