- From: Mike Taylor <notifications@github.com>
- Date: Thu, 24 Feb 2022 12:24:22 -0800
- To: w3c/permissions <permissions@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
- Message-ID: <w3c/permissions/pull/367/review/892942449@github.com>
@miketaylr approved this pull request.
LGTM w/ nits
> </p>
+ <aside class="example" title="Powerful features are policy-controlled features">
+ <p>
+ This example shows how the permissions policy set through the [^iframe/allow^]
+ attribute controls whether the [^iframe^] is [=allowed to use=] a powerful feature.
+ Because `"geolocation"` is allowed, the [^iframe^]'s document can request permission
+ from the user to use the [[[Geolocation]]] (i.e., it will prompt the user for express
+ permission to access their location information). However, request permission to use
```suggestion
permission to access their location information). However, requesting permission to use
```
> A <dfn class="export" data-local-lt="feature">powerful feature</dfn> is a web platform
feature (usually an API) for which a user gives [=express permission=] before the feature
- can be used. Access to the feature is determined by the user having
- [=permission/granted=] permission, or by satisfying some criteria that is equivalent to a
- permission [=permission/grant=].
+ can be used. Except for a few notable exceptions (e.g., the [[[Notifications]]]), most
+ powerful features are also [=policy-controlled features=]. For powerful features that are
+ [=policy-controlled features=], [[[permissions-policy]]] controls whether a [=document=]
+ is [=allowed to use=] a feature, and only if it is allowed can a powerful feature request
A couple of possible rewording suggestions:
1. For powerful features that are also policy-controlled features, Permissions Policy controls whether a document is allowed to use a given feature. A powerful feature may only request express permission from a user if the document has permission delegated to it via the corresponding policy-controlled feature.
2. For powerful features that are also policy-controlled features, a powerful feature may only request express permission from a user if and only if a document has permission delegated to it via Permissions Policy.
--
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/pull/367#pullrequestreview-892942449
You are receiving this because you are subscribed to this thread.
Message ID: <w3c/permissions/pull/367/review/892942449@github.com>
Received on Thursday, 24 February 2022 20:24:34 UTC