1555413 - Only give private permission to builtin/system addons

Status: NEW

(WebExtensions :: General, task, P3)

Description

[Shane Caraveo (:mixedpuppy)]

We currently grant private browsing permission to all privileged addons. Since privileged addons can also be user-installed, we shouldn't automatically grant private browsing to those, they should follow the same rules as any user-installed addon. We may want a way to make some privileged addons opt-out rather than opt-in to better support our product experiments (e.g. secure proxy).

1. only grant to builtin/system addons
2. add a privileged permission, privateBrowsing, so privileged extensions can change to opt-out. Users would still be able to remove private browsing access from those extensions

Comment 1

[Shane Caraveo (:mixedpuppy)]

We should also consider auto-granting access to temporary installed extensions (e.g. via about:debugging), perhaps via a pref that must be toggled in about:debugging.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug is a task, but please change it back in case of error.

Comment 3

[Shane Caraveo (:mixedpuppy)]

We haven't had any issues around this so moving to p3