427347 - Archive http://www.mozilla.org/projects/security/components/per-file.html

Status: RESOLVED DUPLICATE of bug 874526

(www.mozilla.org :: General, defect)

Description

[Xavier Vergés]

When setting per-file permissions, only a single url can be specified per id. The doc states that a list can be speciefied.

Discussed here:
http://groups.google.com/group/mozilla.dev.security/browse_frm/thread/74b8e3320f257564

Comment 1

[Xavier Vergés]

Attachment: Diff created from https://doctor.mozilla.org

Comment 2

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 313902 [details] [diff] [review]
Diff created from https://doctor.mozilla.org

Looks good.  I don't think Daniel's review is needed here, unless he wants to review it.

Comment 3

[Reed Loden [:reed]]

Thanks, bz. I just requested review from both of you in the hopes that one of you would get to it sooner. I'll land this sometime.

Comment 4

[Boris Zbarsky [:bzbarsky]]

Yeah, I assumed that was the deal.  ;)

Comment 5

[Daniel Veditz [:dveditz]]

Comment on attachment 313902 [details] [diff] [review]
Diff created from https://doctor.mozilla.org

>+user_pref("capability.principal.&lt;group name&gt;.id", "&lt;Absolute URL&gt;");<br>
>+user_pref("capability.principal.&lt;group name&gt;.&lt;granted|denied&gt;", "&lt;Space-separated list of privilege names&gt;");

Yes, the id needs to be absolute (it's passed to nsScriptSecurityManager::InitFromPersistant); best guess is the doc writer got mixed up with capability.policy. whose policynames and .sites prefs take space-and/or-comma separated strings.

don't all these prefs have to be
"capability.principal.codebase.<group>." ?
                      ^^^^^^^^

Comment 6

[Reed Loden [:reed]]

So, updated patch needed?

Comment 7

[Gordon P. Hemsley [:GPHemsley]]

What's the status of this?

Comment 8

[Boris Zbarsky [:bzbarsky]]

The whole document should be marked deprecated, for the most part.