> + 3. When crosswalk launches application it has to call security-manager > (which calls cynara) in order to check access to privileges that are accessed > by > service but directly. > Security-manager will check in cynara acces to such privileges and assign > proper groups to process that was just launched. DAC will take care of access > control since then.
That's what I understand. Thanks Zhang Xu > -----Original Message----- > From: Lukasz Wojciechowski [mailto:[email protected]] > Sent: Thursday, September 4, 2014 3:24 PM > To: Zhang, Xu U; José Bollo > Cc: Whiteman, John L; Oda, Terri; [email protected] > Subject: Re: [Dev] [Cynara] Async admin API proposal > > > W dniu 2014-09-04 09:07, Zhang, Xu U pisze: > > There are two point for Crosswalk to call Cynara related APIs. > > 1. Crosswalk installer registers application's permission list to Cynara. I > > think > installer will not call Cynara admin APIs directly but call security manager > APIs. > Right? > [Lukasz] Yes. You are right. > > 2. Crosswalk browser process checks application privilege by calling Cynara > client APIs during runtime. > [Lukasz] Yes > > + 3. When crosswalk launches application it has to call security-manager > (which calls cynara) in order to check access to privileges that are accessed > by > service but directly. > Security-manager will check in cynara acces to such privileges and assign > proper groups to process that was just launched. DAC will take care of access > control since then. > > > > Best Regards > > Zhang Xu > >> -----Original Message----- > >> From: José Bollo [mailto:[email protected]] > >> Sent: Thursday, September 4, 2014 2:42 PM > >> To: Zhang, Xu U > >> Cc: Whiteman, John L; Oda, Terri; Lukasz Wojciechowski; > >> [email protected] > >> Subject: Re: [Dev] [Cynara] Async admin API proposal > >> > >> On gio, 2014-09-04 at 01:59 +0000, Zhang, Xu U wrote: > >>> I am sorry that I have made a mistake on web API running process. > >>> It is should be: > >>> > >>> One is Tizen device APIs, which will run the extension process. The > >>> other is some W3C web APIs, which including Geolocation, media and > >>> so on will run in the browser process. > >> Hi, > >> > >> cool, it confirms our understanding. > >> > >> But in my understanding, the web process does not require admin > >> accesses to cynara, only client access. > >> > >> What am I missing? > >> > >> Best regards > >> José > >> > >> _______________________________________________ Dev mailing list [email protected] https://lists.tizen.org/listinfo/dev
