1154335 - stop generating privileged packaged apps for 'hello world'

Status: RESOLVED FIXED

(DevTools Graveyard :: WebIDE, defect)

Description

[Andrew Williamson [:eviljeff]]

Project|New app|Hello World produces a privileged packaged app rather than a standard web type.  

This is bad because privileged apps can only be distributed by Marketplace (no self hosting; no 3rd party stores) and the Marketplace review is slower as those approvals are restricted to a limited number of extra trusted reviewers.

Comment 1

[Viswaprasath [:VP7]]

(In reply to Andrew Williamson [:eviljeff] from comment #0)
> Project|New app|Hello World produces a privileged packaged app rather than a
> standard web type.  

 Project|New app|Hello World  standard web app, but it is missing 
 "developer": {
     "name": "Your name",  
   "url": "http://example.com"   
}

Developers who are developing for first time, sometimes find it difficult to upload in the marketplace. While uploading to marketplace without developer name in manifest it wont accept. So in Hello world template these should be included.

In some cases in order to avoid it, many reps suggest developers in their talks to use 
Project|New app|Privileged Empty App

While creates a additional lines 
 "type": "privileged", 
 "permissions": {},

Where many will not be using privileged API's but since it is in WebIDE template they ll keep it without removing.

> This is bad because privileged apps can only be distributed by Marketplace
> (no self hosting; no 3rd party stores) and the Marketplace review is slower
> as those approvals are restricted to a limited number of extra trusted
> reviewers.

As Eviljeff said it is taking so long time and many young developers feel it uneasy. The better solution will be 

To remove two things
1) Hello world template
2) In Privileged Empty App

  We can remove additional lines 
     "type": "privileged", 
     "permissions": {},

So we will have one template for Privileged Apps and another for standard webapps.

Or else we can remove  Privileged Empty App and can add another one line in Hello World app
"developer": {
     "name": "Your name",  
   "url": "http://example.com"   
}

I feel first one will be a better option.

Comment 2

[Soledad Penades [:sole] [:spenades]]

We made them privileged from the start so people would have less issues when they actually added the 'permissions' bit.

Although probably the "hello world" template doesn't need that.

However I haven't been working on this for some months already, this is something that someone from apps should look at. CC:ing Fred so he can figure out who :-)

Comment 3

[Andrew Williamson [:eviljeff]]

I would have thought the CSP restrictions that being privileged adds (remote scripts, eval parsing, etc) would cause more issues for a new developer than permissions not working.

Comment 4

[Fred Wenzel [:wenzel]]

WebIDE isn't my project, and I have no one assigned to it anymore over here.

But in the interest of stopping passing the buck, I can take a look at this myself; I was playing with templates anyway this week.

Comment 5

[Paul Rouget [:paul]]

Are all templates privileged? If so, indeed, at least one should be not privileged.



Viswaprasath, you're saying you want to remove 2 templates? I'm not sure to understand what you're suggesting. Which templates are missing the "developer" field? Only HelloWorld?

Comment 6

[Andrew Williamson [:eviljeff]]

(In reply to Paul Rouget [:paul] from comment #5)
> Are all templates privileged? If so, indeed, at least one should be not
> privileged.

yes.  The two labelled privileged in the description, and also the basic 'hello world' one.

Comment 7

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

I would agree that it seems reasonable to remove the "privileged" type from the most basic "Hello World" template.

Comment 8

[Fred Wenzel [:wenzel]]

(In reply to Paul Rouget [:paul] from comment #5)
> Viswaprasath, you're saying you want to remove 2 templates? I'm not sure to
> understand what you're suggesting. Which templates are missing the
> "developer" field? Only HelloWorld?

That's a different bug from this one, too.

Comment 9

[Fred Wenzel [:wenzel]]

(In reply to Fred Wenzel [:wenzel] from comment #8)
> (In reply to Paul Rouget [:paul] from comment #5)
> > Viswaprasath, you're saying you want to remove 2 templates? I'm not sure to
> > understand what you're suggesting. Which templates are missing the
> > "developer" field? Only HelloWorld?
> 
> That's a different bug from this one, too.

I filed bug 1156550.

Comment 10

[Fred Wenzel [:wenzel]]

Attachment: Link to Github pull-request: https://github.com/mozilla/mortar-hello-world/pull/1

Comment 11

[Fred Wenzel [:wenzel]]

I did roll this into the same PR after all. Can I get a quick review on this?

Comment 12

[Fred Wenzel [:wenzel]]

Okay reviewed and landed (thanks tofumatt).

Now to deploy.

Comment 13

[Soledad Penades [:sole] [:spenades]]

To generate the entire directory contents with the json file and all I built this project: https://github.com/sole/mortar-devtools

Perhaps it should be moved to /mozilla/ !

The git submodules need to be updated to point to the latest version of each template, and then you run node build.js and it generates a /dist/ folder with the zips and a JSON that can be uploaded to the CDN.

Comment 14

[Fred Wenzel [:wenzel]]

Thanks, very convenient! Can you transfer the repo?

Comment 15

[Soledad Penades [:sole] [:spenades]]

Done! Sorry this bug slipped my radar. Hope all the permissioning went well. GitHub transfers are always  a bit traumatic ;-)

Comment 16

[Fred Wenzel [:wenzel]]

(In reply to Soledad Penades [:sole] [:spenades] from comment #15)
> Hope all the permissioning went well.

Seems like it, thank you.

Comment 17

[Fred Wenzel [:wenzel]]

I generated the new package and deployed it along with a new JSON file to the CDN.

It appears to not work yet; I think we need to give the CDN some time to expire.

Comment 18

[Fred Wenzel [:wenzel]]

(In reply to Fred Wenzel [:wenzel] from comment #17)
> It appears to not work yet

Oops, by that I mean the WebIDE still appears to run off the old code.

Comment 19

[Fred Wenzel [:wenzel]]

Confirmed updated code shows up in WebIDE.