W dniu 2014-09-04 09:07, Zhang, Xu U pisze:
There are two point for Crosswalk to call Cynara related APIs.
1. Crosswalk installer registers application's permission list to Cynara. I 
think installer will not call Cynara admin APIs directly but call security 
manager APIs. Right?
[Lukasz] Yes. You are right.
2. Crosswalk browser process checks application privilege by calling Cynara 
client APIs during runtime.
[Lukasz] Yes

+ 3. When crosswalk launches application it has to call security-manager (which calls cynara) in order to check access to privileges that are accessed by service but directly. Security-manager will check in cynara acces to such privileges and assign proper groups to process that was just launched. DAC will take care of access control since then.

Best Regards
Zhang Xu
-----Original Message-----
From: José Bollo [mailto:[email protected]]
Sent: Thursday, September 4, 2014 2:42 PM
To: Zhang, Xu U
Cc: Whiteman, John L; Oda, Terri; Lukasz Wojciechowski; [email protected]
Subject: Re: [Dev] [Cynara] Async admin API proposal

On gio, 2014-09-04 at 01:59 +0000, Zhang, Xu U wrote:
I am sorry that I have made a mistake on web API running process.  It
is should be:

One is Tizen device APIs, which will run the extension process.  The
other is some W3C web APIs, which  including Geolocation, media and so
on will  run  in the browser process.
Hi,

cool, it confirms our understanding.

But in my understanding, the web process does not require admin accesses to
cynara, only client access.

What am I missing?

Best regards
José



_______________________________________________
Dev mailing list
[email protected]
https://lists.tizen.org/listinfo/dev

Reply via email to