[Permissions] Notification on Device API Access

Hi,

The Media Capture Task Force may need to be involved in this discussion, but as it is not only related to media capture but permissions as a whole, including Contacts or Geolocation, I think it is more accurate to start by this mailing list

Current Browser implementations usually ask for user permission providing 3 buttons: "Allow", "Deny", "Always Allow"
I didn't found if there was existing recommendation on on the way to ask user for permissions
I only found this specification for now: http://www.w3.org/TR/api-perms/

(in addition to behavior descriptions in the dedicated API specifications)
More specifically I didn't found yet official recommendations proposing an "Always Allow" type of permission

Giving an "Always Allow" permission is sometimes scaring

- An app is asking me permission to access audio from my microphone, and I totally agree in the current context while using this application.
- I often use this feature of this application and don't want to be asked for permissions each time I use it
- still, I fear that if I give this app an 'always' permission, it might use it in contexts I wouldn't want to...

For the camera, I usually have a light telling me the camera is in use but I may easily miss it. The same way, I would not want to give access to my contacts to an application in all contexts

What I'd expect when an application is asking for permission is eitheir:
- to have a checkbox available: [] notify on access
- to have another button "always with notifications"

When the feature is used, the user is notified without interrupting the application so the user is always aware of this usage in any context.

The notification would allow the user to remove the permission if he feel some abuses, or remove the notifications if he's more confident after usage period.


Of course I may have miss previous discussions on this topic. If you are aware of some of them, I'd be happy to know more on the current state of the art in this area

Kind regards,

Alexandre Morgaut




Alexandre Morgaut
Wakanda Community Manager

4D SAS
60, rue d'Alsace
92110 Clichy
France

Standard : +33 1 40 87 92 00
Email :    Alexandre.Morgaut@4d.com
Web :      www.4D.com

Received on Thursday, 30 May 2013 14:52:47 UTC