764204 - Need to extend nsIPrincipal to recognize apps

Status: RESOLVED DUPLICATE of bug 758258

(Core :: General, defect)

Description

[Lucas Adamski [:ladamski]]

We need to be able to differentiate privileged application assets from non-application assets that may be hosted on the same domain, or (in the future) different apps coming from the same origin.

Comment 1

[Andrew Overholt [:overholt]]

Mounir is going to work on this.

Comment 2

[Mounir Lamouri (:mounir)]

What is that bug for? Is it to make sure applications have different privileges/data/whatever or do we want to use that to differenciate trusted, certified and untrusted apps?

We already have plans for the former but AFAIK, there are no plans for the later and we might need to define something.

Comment 3

[Andrew Overholt [:overholt]]

(In reply to Mounir Lamouri (:mounir) from comment #2)
> What is that bug for? Is it to make sure applications have different
> privileges/data/whatever or do we want to use that to differenciate trusted,
> certified and untrusted apps?

I was interpreting it as being for the former.

Comment 4

[Mounir Lamouri (:mounir)]

In that case, I believe this can be marked as a duplicate of bug 758258. However, we probably want to define how we would differentiate untrusted/trusted/certified apps because with jar identifiers, we will have no way to get that information.

Comment 5

[Andrew Overholt [:overholt]]

Lucas, should we change this bug?

Comment 6

[Lucas Adamski [:ladamski]]

I think we need to be able to do both, but it depends on how we implement privileges.  The camera privilege means something very different for an untrusted vs trusted vs certified app.  If we simply say an app has "camera" privilege then we can't determine the correct experience at runtime.  We may also apply other things based upon app type like a specific CSP policy.  Maybe the best solution would be to keep a reference to the app manifest.  Is that stored in memory after load?

Comment 7

[Jim Straus]

My thought on privileges/permissions is that permissions for the various flavors of apps gets set when the manifest gets installed and parsed (nsIPermissionManager is getting a "SetDefaultPermissions" that takes the app type along with the list of permissions and origin/whatever is used to indicate an app).  After that I don't believe that the permission manager needs to know what type of app it is.  So bug 758258 may be sufficient for the permissions.

Comment 8

[Mounir Lamouri (:mounir)]

For the moment, the plan is to use bug 758258 to do this. Marking as DUPLICATE. Will re-open if the plan changes.