W3C home > Mailing lists > Public > public-device-apis-log@w3.org > November 2016

Re: [sensors] granularity of Permission name for concrete/ fusion sensors

From: Maryam Mehr via GitHub <sysbot+gh@w3.org>
Date: Tue, 08 Nov 2016 15:33:33 +0000
To: public-device-apis-log@w3.org
Message-ID: <issue_comment.created-259168773-1478619212-sysbot+gh@w3.org>
If I understand this issue raised by @riju correctly on this: 
(suppose we give permission for "higher" level sensor, does that mean 
we give implicit permission to the "lower" level sensors), from a 
security point of view, I would say yes, giving permissions to motion 
and orientation does not differ that much from giving permission to 
acc/gyr. 

On the other hand consider the reverse case (suppose we give 
permission for "lower" level sensor, does that mean we give implicit 
permission to the "higher" level sensors), the user would be very 
confused and annoyed if he/she receives permission requests on 
low-level sensors and high-level ones (which are using those low-level
 sensors). 

Hence, my suggestion is to agree on a consistent permission request 
style (either low-level OR high-level) for usability reasons. 

-- 
GitHub Notification of comment by maryammjd
Please view or discuss this issue at 
https://github.com/w3c/sensors/issues/132#issuecomment-259168773 using
 your GitHub account
Received on Tuesday, 8 November 2016 15:33:39 UTC

This archive was generated by hypermail 2.4.0 : Monday, 4 July 2022 12:47:53 UTC