425852 - (1passwd) 1passwd Integration: Firefox must ask for permission for each keychain item.

Status: RESOLVED INVALID

(Firefox :: Shell Integration, defect)

Description

[Thomas K. (:tom)]

Attachment: SecurityAgent asking for permission to access a keychain item

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9pre) Gecko/2008032704 Minefield/3.0pre

Not bug 106400, but resolving it will possibly fix this as well.

In Camino, 1passwd asks for the password to access the keychain once.  Then every 60 minutes when access times out.  However, every use extends the 60 minutes.

In Firefox (Minefield), every request of the keychain (for a previously unused login item, per login per domain) produces a dialog box:

-----
Minefield wants to use your confidential information stored in "example.com" in your keychain.

The authenticity of "Minefield" canot be verified.  Do you want to allow access to this item?

v Details
Keychain: 1Password.keychain
Application: Minefield

[Always Allow]    [Deny] [Allow]
-----

This is annoying.

Comment 1

[:Gavin Sharp [email: [e-mail]]]

Do you know what API Camino uses? How does 1Password integrate with Firefox (via an extension?) If you could get someone who knows more about 1password or what Camino does differently than Firefox to post more information, that would be useful.

Comment 2

[Thomas K. (:tom)]

E-mail Response:

Hey Tom,

Thanks for taking the time to contact us.

Hey!  I got 1passwd via MacHeist and I love it, 

Thank you! This is great to hear. :)

but it has a bit of a problem in Firefox, and I'm pretty sure this is a problem with Firefox as it works fine in Camino.  

The problem you are reporting has to do with the OS X Keychain Access Control List (ACL). Each time you create an item 1Password will add each browser to the ACL of the entry, but only those browsers that are installed when the item is created. 

You can fix this issue by selecting Help > Troubleshooting > Rebuild Keychain File menu item. This will create a brand new keychain and copy all your data into it, assigning the proper ACL as it goes along. You should see the Minefield application in the list of applications that will be granted access.

I hope that helps. Please let me know.

Thanks!

--Dave Teare
Co-author of 1Password
Everyone is Switching to Mac! 
http://switchersblog.com

Comment 3

[Thomas K. (:tom)]

Welp, that worked fine and survives updates, so marking invalid as it's an ACL problem.