1599555 - "Send notifications" permission doesn't respect facebook's settings

Status: RESOLVED INVALID

(Firefox :: Site Permissions, defect)

Description

[Florencia Di Ciocco, NI to vbalducci]

Attachment: facebook.mp4

Steps to reproduce:
Access https://www.facebook.com/ and login
Click on facebook's settings from the upper right side.
From the facebook's left side menu select Notifications and click on "settings", then choose "browser".
Click on "Turn on" button in order to activate the notifications in Firefox.
Select "Allow Notifications".
Reload the page and go to browser again.
Try to turn off notifications

Actual Results:
"Send notifications" permission doesn't respect facebook settings. If I turn off notifications from facebook, the permission is not changed.

Expected Results:
"Send notifications" permission should respect facebook settings. If I turn off notifications from facebook, the permission should be changed to blocked.

Note, this has been the behaviour since at least Nightly 68.

Comment 1

[Emma Zühlcke [:emz]]

Thanks for the detailed bug report!

When you're disabling notifications on Facebook via their UI you're only asking Facebook to not send any. The site is still allowed to send notifications. Websites shouldn't be able to control permissions set in the browser, other than via browser UI like permission prompts.

The spec states that "Notifications can only be displayed if the user (or user agent on behalf of the user) has granted permission." and I think the same goes for revoking permissions.
https://notifications.spec.whatwg.org/#permission-model

Comment 2

[Johann Hofmann [:johannh]]

The permission should not be changed to "blocked" because then Facebook could not ask you again :)

They could revoke permissions with the permission.revoke API but that's currently preffed off in Firefox.

Comment 3

[Florencia Di Ciocco, NI to vbalducci]

Hi Johan, thanks for the explanation!