Re: [w3c/permissions] Editorial: clarify Permissions Policy / Powerful Feature overlap (PR #367)

@miketaylr approved this pull request.

LGTM w/ nits

>          </p>
+        <aside class="example" title="Powerful features are policy-controlled features">
+          <p>
+            This example shows how the permissions policy set through the [^iframe/allow^]
+            attribute controls whether the [^iframe^] is [=allowed to use=] a powerful feature.
+            Because `"geolocation"` is allowed, the [^iframe^]'s document can request permission
+            from the user to use the [[[Geolocation]]] (i.e., it will prompt the user for express
+            permission to access their location information). However, request permission to use

```suggestion
            permission to access their location information). However, requesting permission to use
```

>            A <dfn class="export" data-local-lt="feature">powerful feature</dfn> is a web platform
           feature (usually an API) for which a user gives [=express permission=] before the feature
-          can be used. Access to the feature is determined by the user having
-          [=permission/granted=] permission, or by satisfying some criteria that is equivalent to a
-          permission [=permission/grant=].
+          can be used. Except for a few notable exceptions (e.g., the [[[Notifications]]]), most
+          powerful features are also [=policy-controlled features=]. For powerful features that are
+          [=policy-controlled features=], [[[permissions-policy]]] controls whether a [=document=]
+          is [=allowed to use=] a feature, and only if it is allowed can a powerful feature request

A couple of possible rewording suggestions:

1. For powerful features that are also policy-controlled features, Permissions Policy controls whether a document is allowed to use a given feature. A powerful feature may only request express permission from a user if the document has permission delegated to it via the corresponding policy-controlled feature.

2. For powerful features that are also policy-controlled features, a powerful feature may only request express permission from a user if and only if a document has permission delegated to it via Permissions Policy.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/pull/367#pullrequestreview-892942449
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/permissions/pull/367/review/892942449@github.com>

Received on Thursday, 24 February 2022 20:24:34 UTC