Security/B2G/PermissionReview/New permission model: Difference between revisions

Jump to navigation Jump to search
Intro edited
(Todo implicit management)
(Intro edited)
Line 1: Line 1:
== New Privileged Applications ==
== Goals ==
A [[FirefoxOS/New security model|new security model]] for privileged apps (those which require access to sensitive APIs and therefore need to be signed) is currently being discussed. We will continue to use a packaged-based approach for privileged applications but we want to eliminate the differences between Gaia and other privileged applications and in general make privileged applications more web-like.
* simplify the permission model for users and developers
* move the FxOS permission model more in line with desktop & mobile (i.e. for regular web content)
* Provide a permission model that supports the [[FirefoxOS/New security model|new security model]]


=== Proposed Permission Model Changes ===
=== Proposed Permission Model Changes ===
Line 6: Line 8:


A summary of proposed changes:
A summary of proposed changes:
* Combine certified/privileged app types
* Combine certified/privileged permission types
* Simplify permissions model
* Simplify permissions model
** Separate Permissions vs. Privileges
** Web Permissions vs. Privileged Permissions
* Improve permissions management on device
* Improve permissions management on device
** Make permission granting closer to Firefox desktop/mobile
** Make permission granting closer to Firefox desktop/mobile
** Improve permission management UX (view per permission, by app, providing audit logs of permission usage etc)  
** Improve permission management UX (view per permission, by app, providing audit logs of permission usage etc)  
* Improve privilege granting process
 
** Automate parts of review process
== Simplified Permission Model ==
** Automated signing on a per-developer basis
 
* Work towards opening up privileged APIs to the web
 
** WebNFC
** WebBluetooth
** others?
* Investigate service based approach to exposing privileged functionality to hosted apps
* Investigate service based approach to exposing privileged functionality to hosted apps
** Service like-apps
** Service like-apps
canmove, Confirmed users
1,220

edits

Navigation menu