Hacker News Reader

Comment by conductor | Hacker News Reader

Is there going to be a permissions system where I can specifically choose which set of APIs I allow to dispose to each extension?

View on HN

Yes, there already is. Firefox enforces the same manifest permissions in WebExtensions as Chrome.

I assumed that the GP meant a permissions system for users, not for WebExtension developers. I don't believe there is that. It seems like it would be relatively trivial to add given the manifest permissions system is already in place though.

> I assumed that the GP meant a permissions system for users

This seems far beyond the capabilities of most users to understand. Perhaps someone can make an add-on for power users who are interested.

As well as Android and iPhone, many auth services (e.g. Facebook Connect) also offer this feature to presumably mostly non-technical users.

Also, I've not investigated but I doubt the WebExtensions API would provide access to features required to implement this as an extension (it's a much more limited extension API than previous Firefox ones)

Android and iPhone do it, so....

For some privileges. You can say "No, don't allow photos access," but there are other permissions like internet access that you can't block.

Actually for certain classes of iOS 'apps' you can do exactly this - to enable third party iOS keyboard access you need to go into Settings and enable an extended privilege set (which includes internet access)

Reply on news.ycombinator.com