Activity log for bug #1227821

Date Who What changed Old value New value Message
2013-09-19 17:54:10 Jamie Strandboge bug added bug
2013-09-19 17:54:56 Jamie Strandboge description Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings.
2013-09-19 17:55:02 Jamie Strandboge bug task added address-book-app
2013-09-19 17:56:04 Jamie Strandboge description Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings. Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings. Targeting to T-Series for now, since the trust-store is not in a reusable form yet.
2013-09-19 17:56:25 Jamie Strandboge bug added subscriber Bill Filler
2013-09-19 17:56:34 Jamie Strandboge bug added subscriber Thomas Voß
2013-09-19 17:57:39 Jamie Strandboge nominated for series Ubuntu T-series
2013-09-19 17:57:39 Jamie Strandboge bug task added address-book-app (Ubuntu T-series)
2013-09-19 17:57:51 Jamie Strandboge nominated for series Ubuntu Saucy
2013-09-19 17:57:51 Jamie Strandboge bug task added address-book-app (Ubuntu Saucy)
2013-09-19 17:57:57 Jamie Strandboge address-book-app (Ubuntu Saucy): status New Won't Fix
2013-09-19 17:58:52 Jamie Strandboge description Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings. Targeting to T-Series for now, since the trust-store is not in a reusable form yet. Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to obtain all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings. Targeting to T-Series for now, since the trust-store is not in a reusable form yet.
2013-09-19 18:00:27 Jamie Strandboge tags application-confinement
2013-09-19 18:00:39 Jamie Strandboge bug task added apparmor-easyprof-ubuntu (Ubuntu)
2013-09-19 18:00:47 Jamie Strandboge apparmor-easyprof-ubuntu (Ubuntu Saucy): status New Won't Fix
2013-09-19 18:00:53 Jamie Strandboge apparmor-easyprof-ubuntu (Ubuntu T-series): status New Triaged
2013-09-26 23:01:27 Jamie Strandboge apparmor-easyprof-ubuntu (Ubuntu T-series): status Triaged Confirmed
2013-12-04 19:05:12 Bill Filler bug task added address-book-service (Ubuntu)
2013-12-04 19:05:32 Bill Filler bug task deleted address-book-service (Ubuntu Saucy)
2013-12-04 19:05:52 Bill Filler address-book-service (Ubuntu Trusty): assignee Renato Araujo Oliveira Filho (renatofilho)
2013-12-04 19:06:04 Bill Filler address-book-app: assignee Renato Araujo Oliveira Filho (renatofilho)
2013-12-04 19:06:30 Bill Filler address-book-app (Ubuntu Saucy): assignee Renato Araujo Oliveira Filho (renatofilho)
2013-12-04 19:06:52 Bill Filler address-book-service (Ubuntu Trusty): importance Undecided High
2013-12-04 19:06:55 Bill Filler address-book-app (Ubuntu Saucy): importance Undecided High
2013-12-04 19:06:58 Bill Filler address-book-app: importance Undecided High
2014-01-13 20:24:04 Pat McGowan address-book-app (Ubuntu Trusty): status New Confirmed
2014-01-13 20:24:07 Pat McGowan address-book-app (Ubuntu Trusty): importance Undecided High
2014-03-13 12:29:00 Anders address-book-service (Ubuntu Trusty): status New Confirmed
2014-04-04 13:52:24 Daniel Holbach bug added subscriber Daniel Holbach
2014-04-22 17:17:30 Launchpad Janitor apparmor-easyprof-ubuntu (Ubuntu): status New Confirmed
2014-06-17 14:29:59 Jamie Strandboge summary please integrate with trust-store please add trust-store integration for access to contacts
2014-06-17 14:30:07 Jamie Strandboge address-book-app (Ubuntu Trusty): status Confirmed Won't Fix
2014-06-17 14:30:14 Jamie Strandboge address-book-service (Ubuntu Trusty): status Confirmed Won't Fix
2014-06-17 14:30:18 Jamie Strandboge apparmor-easyprof-ubuntu (Ubuntu Trusty): status Confirmed Won't Fix
2014-07-25 15:29:16 John Lea address-book-app (Ubuntu): status Confirmed Invalid
2014-07-25 15:29:20 John Lea address-book-service (Ubuntu): status Confirmed Invalid
2014-07-25 15:29:24 John Lea apparmor-easyprof-ubuntu (Ubuntu): status Confirmed Invalid
2016-05-10 18:19:13 Renato Araujo Oliveira Filho address-book-app (Ubuntu): assignee Renato Araujo Oliveira Filho (renatofilho)
2016-05-10 18:19:21 Renato Araujo Oliveira Filho bug task deleted address-book-app