Re: [w3c/permissions] Flesh out request("geolocation") (#112)

> On 8 Aug 2016, at 9:12 PM, Martin Thomson <notifications@github.com> wrote:
> 
> I think we could change Firefox's behavior that if a .request() is made, then you just grant it without needing to ask for it again in the same realm, and for a given origin.
> 
> That's tricky, and I doubt that you'd find this easy.
> 

Maybe. Need to poke around the security manager in Gecko.

> It all depends on what you believe the model to be. The prevailing view is that without the "don't ask me again" checkbox enabled, this is a one-off grant for where I currently am.
> 

Yeah, it's a tricky one because, for instance, iOS only supports "always" and no checkbox. In any case, we need to support session based and persistent permissions... But making these based on realms instead of origins seems overly complicated. 

> However, if your assertion is that watchPosition allows for a stream of requests that are not further gated on a prompt, that's a fair call. I don't know exactly what the expected outcome is here.
> 

Well, we should get agreement on the semantics of "request()" wrt its effect on subsequent calls to the APIs it relates to. The OP seems to imply side effects, because it seems to conflate a relationship to geolocation's error callbacks? 



> —
> You are receiving this because you commented.
> Reply to this email directly, view it on GitHub, or mute the thread.
> 


---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/112#issuecomment-238217483