canmove, Confirmed users
1,220
edits
User talk:Ptheriault: Difference between revisions
Jump to navigation
Jump to search
→=Motivation
Ptheriault (talk | contribs) (→Web App Security Model: new section) |
Ptheriault (talk | contribs) |
||
| Line 7: | Line 7: | ||
Web App Permissions Model | Web App Permissions Model | ||
==Introduction== | ==Introduction== | ||
===Motivation== | ===Motivation=== | ||
Currently all web functionality is provided in an untrusted model. Any API function that is to be made available to web content must be designed in such a way that it cannot be abused by potentially untrusted content, which often means limiting the flexibility or features of an API. A permissions model is required to define the requirements needed to trust web content with more powerful functionality and also to define the process for granting and managing permissions to use this functionality. | Currently all web functionality is provided in an untrusted model. Any API function that is to be made available to web content must be designed in such a way that it cannot be abused by potentially untrusted content, which often means limiting the flexibility or features of an API. A permissions model is required to define the requirements needed to trust web content with more powerful functionality and also to define the process for granting and managing permissions to use this functionality. | ||