2013-09-19 17:54:10 |
Jamie Strandboge |
bug |
|
|
added bug |
2013-09-19 17:54:56 |
Jamie Strandboge |
description |
Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. |
Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings. |
|
2013-09-19 17:55:02 |
Jamie Strandboge |
bug task added |
|
address-book-app |
|
2013-09-19 17:56:04 |
Jamie Strandboge |
description |
Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings. |
Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings.
Targeting to T-Series for now, since the trust-store is not in a reusable form yet. |
|
2013-09-19 17:56:25 |
Jamie Strandboge |
bug |
|
|
added subscriber Bill Filler |
2013-09-19 17:56:34 |
Jamie Strandboge |
bug |
|
|
added subscriber Thomas Voß |
2013-09-19 17:57:39 |
Jamie Strandboge |
nominated for series |
|
Ubuntu T-series |
|
2013-09-19 17:57:39 |
Jamie Strandboge |
bug task added |
|
address-book-app (Ubuntu T-series) |
|
2013-09-19 17:57:51 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Saucy |
|
2013-09-19 17:57:51 |
Jamie Strandboge |
bug task added |
|
address-book-app (Ubuntu Saucy) |
|
2013-09-19 17:57:57 |
Jamie Strandboge |
address-book-app (Ubuntu Saucy): status |
New |
Won't Fix |
|
2013-09-19 17:58:52 |
Jamie Strandboge |
description |
Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings.
Targeting to T-Series for now, since the trust-store is not in a reusable form yet. |
Currently the 'contacts' policy group is reserved because giving access to the address-book-app's DBus API allows applications to obtain all contacts without user consent. If 'contacts' are going to be made generally available to untrusted appstore apps, the address-book-app service needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the address-book-app over DBus, address-book-app will contact trust-store, the trust-store will prompt the user ("Foo wants to access your contacts. Is this ok? Yes|No"), optionally cache the result and return the result to address-book-app. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings.
Targeting to T-Series for now, since the trust-store is not in a reusable form yet. |
|
2013-09-19 18:00:27 |
Jamie Strandboge |
tags |
|
application-confinement |
|
2013-09-19 18:00:39 |
Jamie Strandboge |
bug task added |
|
apparmor-easyprof-ubuntu (Ubuntu) |
|
2013-09-19 18:00:47 |
Jamie Strandboge |
apparmor-easyprof-ubuntu (Ubuntu Saucy): status |
New |
Won't Fix |
|
2013-09-19 18:00:53 |
Jamie Strandboge |
apparmor-easyprof-ubuntu (Ubuntu T-series): status |
New |
Triaged |
|
2013-09-26 23:01:27 |
Jamie Strandboge |
apparmor-easyprof-ubuntu (Ubuntu T-series): status |
Triaged |
Confirmed |
|
2013-12-04 19:05:12 |
Bill Filler |
bug task added |
|
address-book-service (Ubuntu) |
|
2013-12-04 19:05:32 |
Bill Filler |
bug task deleted |
address-book-service (Ubuntu Saucy) |
|
|
2013-12-04 19:05:52 |
Bill Filler |
address-book-service (Ubuntu Trusty): assignee |
|
Renato Araujo Oliveira Filho (renatofilho) |
|
2013-12-04 19:06:04 |
Bill Filler |
address-book-app: assignee |
|
Renato Araujo Oliveira Filho (renatofilho) |
|
2013-12-04 19:06:30 |
Bill Filler |
address-book-app (Ubuntu Saucy): assignee |
|
Renato Araujo Oliveira Filho (renatofilho) |
|
2013-12-04 19:06:52 |
Bill Filler |
address-book-service (Ubuntu Trusty): importance |
Undecided |
High |
|
2013-12-04 19:06:55 |
Bill Filler |
address-book-app (Ubuntu Saucy): importance |
Undecided |
High |
|
2013-12-04 19:06:58 |
Bill Filler |
address-book-app: importance |
Undecided |
High |
|
2014-01-13 20:24:04 |
Pat McGowan |
address-book-app (Ubuntu Trusty): status |
New |
Confirmed |
|
2014-01-13 20:24:07 |
Pat McGowan |
address-book-app (Ubuntu Trusty): importance |
Undecided |
High |
|
2014-03-13 12:29:00 |
Anders |
address-book-service (Ubuntu Trusty): status |
New |
Confirmed |
|
2014-04-04 13:52:24 |
Daniel Holbach |
bug |
|
|
added subscriber Daniel Holbach |
2014-04-22 17:17:30 |
Launchpad Janitor |
apparmor-easyprof-ubuntu (Ubuntu): status |
New |
Confirmed |
|
2014-06-17 14:29:59 |
Jamie Strandboge |
summary |
please integrate with trust-store |
please add trust-store integration for access to contacts |
|
2014-06-17 14:30:07 |
Jamie Strandboge |
address-book-app (Ubuntu Trusty): status |
Confirmed |
Won't Fix |
|
2014-06-17 14:30:14 |
Jamie Strandboge |
address-book-service (Ubuntu Trusty): status |
Confirmed |
Won't Fix |
|
2014-06-17 14:30:18 |
Jamie Strandboge |
apparmor-easyprof-ubuntu (Ubuntu Trusty): status |
Confirmed |
Won't Fix |
|
2014-07-25 15:29:16 |
John Lea |
address-book-app (Ubuntu): status |
Confirmed |
Invalid |
|
2014-07-25 15:29:20 |
John Lea |
address-book-service (Ubuntu): status |
Confirmed |
Invalid |
|
2014-07-25 15:29:24 |
John Lea |
apparmor-easyprof-ubuntu (Ubuntu): status |
Confirmed |
Invalid |
|
2016-05-10 18:19:13 |
Renato Araujo Oliveira Filho |
address-book-app (Ubuntu): assignee |
|
Renato Araujo Oliveira Filho (renatofilho) |
|
2016-05-10 18:19:21 |
Renato Araujo Oliveira Filho |
bug task deleted |
address-book-app |
|
|