[w3c/permissions] Permissions policy gap: a site can disable a capability entirely, but can't restrict it to non-persistent grants (Issue #479)

josephrocca created an issue (w3c/permissions#479)

I was helpfully directed to this repo by @jan-ivar from [this issue](https://github.com/w3c/mediacapture-main/issues/991#issuecomment-5731155791), and I'm wondering if there has been any movement/discussion here, or if the spec has fully settled and is unlikely to ever change in terms of solving this:

> I have a case where I don't want to allow the user to give me permanent access to their sensitive data, in the same way that a company accepting credit cards would not like to be forced to keep the credit card of their customer in plain text in their database. It's a liability that can leak extremely sensitive info if there is a coding mistake or if the site is hacked.

A few solutions that come to mind for solving this:
1. Add back something like `Permission.revoke()`.
2. Add a way to only show "allow this time" when making the permission request call - i.e. no selectable "allow permanently" option.
3. Add a Permissions Policy control so a site can declare that grants for a feature must not persist. The browser would then omit the "allow permanently" option and/or drop the grant when the session ends.

## Related / References:
* Android self-revocation / "developer downgradable permissions": [`revokeSelfPermissionOnKill()` API reference](https://developer.android.com/reference/android/content/Context#revokeSelfPermissionOnKill(java.lang.String)) and the [guide section](https://developer.android.com/training/permissions/requesting). It's available on Android 13 and higher, for removing access to runtime permissions the app no longer needs.
* https://github.com/w3c/permissions/pull/159
* https://github.com/w3c/permissions/issues/418
* https://github.com/w3c/permissions/issues/414
* https://github.com/w3c/permissions/issues/46


-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/permissions/issues/479
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/permissions/issues/479@github.com>