Re: [w3c/permissions] Inform users when a UA administrator overrides their permission choices. (PR #420)

@jyasskin commented on this pull request.



> @@ -1308,6 +1325,12 @@ <h2 id="privacy-considerations">
         A user agent SHOULD provide a means for the user to review, update, and reset the
         [=permission=] [=permission/state=] of [=powerful features=] associated with an [=origin=].
       </p>
+      <p>
+        Some [=user agents=] support <dfn data-lt="administrator">administrators</dfn> who can
+        override user choices about permissions, either to block permissions or to allow them on
+        certain sites. Overriding user choices in this way can be a privacy problem, so this
+        specification requires that the [=user agent=] inform users when it happens.

Chrome has a couple that are exposed like 
![calendar.google.com site info panel showing Notifications, Allowed, and "Managed by your organization"](https://github.com/w3c/permissions/assets/83420/145ae377-e0e0-43ce-af80-4cc9f9ce62d1) and 
!["HID devices with usages from usage page F1D0" allowed to chrome-extension://ckcendljdlmgnhghiaomidhiiclmapok/. This setting is managed by your administrator.](https://github.com/w3c/permissions/assets/83420/15b660f5-1991-409b-97ea-9bc490c2e9aa)

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/pull/420#discussion_r1336456355
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/permissions/pull/420/review/1643089654@github.com>