- From: Mike Taylor <notifications@github.com>
- Date: Thu, 24 Feb 2022 12:24:22 -0800
- To: w3c/permissions <permissions@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
- Message-ID: <w3c/permissions/pull/367/review/892942449@github.com>
@miketaylr approved this pull request. LGTM w/ nits > </p> + <aside class="example" title="Powerful features are policy-controlled features"> + <p> + This example shows how the permissions policy set through the [^iframe/allow^] + attribute controls whether the [^iframe^] is [=allowed to use=] a powerful feature. + Because `"geolocation"` is allowed, the [^iframe^]'s document can request permission + from the user to use the [[[Geolocation]]] (i.e., it will prompt the user for express + permission to access their location information). However, request permission to use ```suggestion permission to access their location information). However, requesting permission to use ``` > A <dfn class="export" data-local-lt="feature">powerful feature</dfn> is a web platform feature (usually an API) for which a user gives [=express permission=] before the feature - can be used. Access to the feature is determined by the user having - [=permission/granted=] permission, or by satisfying some criteria that is equivalent to a - permission [=permission/grant=]. + can be used. Except for a few notable exceptions (e.g., the [[[Notifications]]]), most + powerful features are also [=policy-controlled features=]. For powerful features that are + [=policy-controlled features=], [[[permissions-policy]]] controls whether a [=document=] + is [=allowed to use=] a feature, and only if it is allowed can a powerful feature request A couple of possible rewording suggestions: 1. For powerful features that are also policy-controlled features, Permissions Policy controls whether a document is allowed to use a given feature. A powerful feature may only request express permission from a user if the document has permission delegated to it via the corresponding policy-controlled feature. 2. For powerful features that are also policy-controlled features, a powerful feature may only request express permission from a user if and only if a document has permission delegated to it via Permissions Policy. -- Reply to this email directly or view it on GitHub: https://github.com/w3c/permissions/pull/367#pullrequestreview-892942449 You are receiving this because you are subscribed to this thread. Message ID: <w3c/permissions/pull/367/review/892942449@github.com>
Received on Thursday, 24 February 2022 20:24:34 UTC