Re: [w3c/permissions] "Requesting more permission" algorithms are tightly coupled to prompts (#153)

If the UA returns "prompt" from [permission state](https://w3c.github.io/permissions/#permission-state) then I think it's reasonable to expect that the UA will show some type of UI that elicits some kind of information from the user which is fed back into the decision (which I would describe as a prompt :).

However, that doesn't stop the UA from determining the decision through other means. What I mean is that the UA is never obliged to return "prompt". For example, UAs would be free to block a permission to a website that is on a malware blacklist. In this case, the UA would return "denied" as the value for [permission state](https://w3c.github.io/permissions/#permission-state) and a prompt would never be shown. Likewise, they could decide, based on prior user behavior, that it is a good choice to allow a permission for a particular website and they could return "granted" here.

So I guess it feels relatively consistent in my mind. Note that exposing the notion of "prompt" in the platform was an explicit choice. It does imply something about what the UA will do (although it's only vaguely defined what a prompt will do). But it's also practically important because websites need to know if they user will expect some type of UI to be shown in order to give them appropriate warning.

Does that make sense? What are your thoughts? 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/153#issuecomment-311257890