Re: [w3c/permissions] Allow Feature Policy-based permission models (#185)

> you can really return anything you want when "Reading the current Permission State"

Not really. There's [this sentence](https://w3c.github.io/permissions/#permission-state) in there: *"If there was a previous invocation of this algorithm with the same descriptor and settings, returning previousResult, and the UA has not received [new information about the user’s intent](https://w3c.github.io/permissions/#new-information-about-the-users-intent) since that invocation, return previousResult."*

The limited example I gave may not show it, so let me elaborate on it:

1. Say the user blocks cam+mic access in NYTimes's "tech support" section.
2. Then they go to the "live chat with author" section and grant persistent cam+mic access.
3. Then they return to the tech-support section. The spec sentence above blocks access.

To the end-user, this is all nytimes.com, so access should not have been blocked in 3. The user shouldn't even see a prompt in this case, since they effectively approved persistent access in 2.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/185#issuecomment-519975022