1262218 - Update domains for permissions

Status: RESOLVED FIXED

(Toolkit :: Add-ons Manager, defect)

Description

[Andy McKay]

In bug 1262009 ops want to run the discovery pane on a new domain. That means an update to the permissions for UITour bug 1256598 and AddonsManager bug 1245571.

Comment 1

[Stuart Colville [:muffinresearch]]

The ops bug mentioned in the initial description is a typo it should be bug 1262209

Comment 2

[Andrew Swan [:aswan]]

For production UITour and mozAddonManager are both currently exposed to addons.mozilla.org and services.addons.mozilla.org.  Should discovery.addons.mozilla.org replace one or both of these or just be added to the list?

For dev, UITour gets permitted domains from a preference setting so there's nothing to do for this issue.
But mozAddonManager uses a hard-coded list which is currently:
addons.allizom.org
services.addons.allizom.org
addons-dev.allizom.org
services.addons-dev.allizom.org
example.com

Bug 1262209 mentions discovery.addons-dev.allizom.org and discovery.addons.allizom.org for dev and staging respectively.  Same question: should these replace (part of) the current list or just be added to it?

Comment 3

[Andy McKay]

(In reply to Andrew Swan [:aswan] from comment #2)
> For production UITour and mozAddonManager are both currently exposed to
> addons.mozilla.org and services.addons.mozilla.org.  Should
> discovery.addons.mozilla.org replace one or both of these or just be added
> to the list?
> 
> For dev, UITour gets permitted domains from a preference setting so there's
> nothing to do for this issue.
> But mozAddonManager uses a hard-coded list which is currently:
> addons.allizom.org
> services.addons.allizom.org
> addons-dev.allizom.org
> services.addons-dev.allizom.org
> example.com
> 
> Bug 1262209 mentions discovery.addons-dev.allizom.org and
> discovery.addons.allizom.org for dev and staging respectively.  Same
> question: should these replace (part of) the current list or just be added
> to it?

discovery.* can replace services.* in all the above examples.

Comment 4

[Andrew Swan [:aswan]]

Attachment: MozReview Request: Bug 1262218 Update permissions for APIs used for addon discovery

Review commit: https://reviewboard.mozilla.org/r/46885/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/46885/

Comment 5

[Robert Helmer [:rhelmer]]

Comment on attachment 8741979 [details]
MozReview Request: Bug 1262218 Update permissions for APIs used for addon discovery

https://reviewboard.mozilla.org/r/46885/#review43899

It might be nice to have constants for these domains instead of having the exact domain names duplicated, but this is not a new issue introduced by this patch so up to you.

Comment 6

[Andrew Swan [:aswan]]

https://reviewboard.mozilla.org/r/46885/#review43899

Yeah, I agree that would be nice but I'm pretty sure the permissions file is just copied verbatim into the build directory so substituting for a centrally defined symbol would entail introducing a pre-processing step.  I think I'll leave that for another day :-)

Comment 7

[Pulsebot]

https://hg.mozilla.org/integration/fx-team/rev/6f7203377bf7

Comment 8

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/6f7203377bf7