792309 - Tracking bug for blocklisting support

Status: RESOLVED INCOMPLETE

(Marketplace Graveyard :: Security, defect)

Description

[Lucas Adamski [:ladamski]]

Tracking Marketplace work necessary to ensure support for blocklisting, which will be essentially limited to privileged apps for the 1.0 timeframe.

Comment 1

[Christopher Van Wiemeersch [:cvan]]

This different than bug 773118?

Comment 2

[Lucas Adamski [:ladamski]]

Yes, 773118 is a corner case of this bug and as such a dependent.

Comment 3

[Andrew Williamson [:eviljeff]]

while I have this thought in my head: 
when this is implemented the fake-updates proposed in bug 773117 will need to still work when the Marketplace listing is rejected or disabled (admin or user).  (Normal updates would generally not be served when a listing is disabled, or the app is an unapproved state)

Comment 4

[Andrew Williamson [:eviljeff]]

Is this tracking bug still valid?

Comment 5

[Lucas Adamski [:ladamski]]

We still need a proper app blocklisting solution.

Comment 6

[Wil Clouser [:clouserw]]

Can we assign this to an owner and give it a priority?

Comment 7

[David Bialer [:dbialer]]

This is for hosted apps I assume?

One suggestion is to allow an app's origination store to have privileges to blocklist it, if the app came from a store.  To use push notification to take an action on the installed app (for instance, remove it and set a notification message? or re-install the app to point to a hosted 'blocked' message).  Or perhaps use a push message to Gaia to take an action on the device?

Comment 8

[Wil Clouser [:clouserw]]

Closing this bug as there isn't actionable work.  Please reopen/refile when there are things to do.  Thanks!