please add trust-store integration to e-d-s for calendar API
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apparmor-easyprof-ubuntu (Ubuntu) |
Confirmed
|
Wishlist
|
Unassigned | ||
Saucy |
Won't Fix
|
Undecided
|
Unassigned | ||
Trusty |
Won't Fix
|
Undecided
|
Unassigned | ||
evolution-data-server (Ubuntu) |
Confirmed
|
Wishlist
|
Unassigned | ||
Saucy |
Won't Fix
|
Undecided
|
Unassigned | ||
Trusty |
Won't Fix
|
Undecided
|
Unassigned |
Bug Description
Currently the 'calendar' policy group is reserved because giving access to the EDS's DBus API allows applications to access all calendars without user consent. If calendars are going to be made generally available to untrusted appstore apps, EDS needs to be modified to use trust-store, like location-service does. Integrating with trust-store means that when an app tries to connect to the EDS over DBus, EDS will contact trust-store, the trust-store will prompt the user ("Foo wants to access your calendars. Is this ok? Yes|No"), optionally cache the result and return the result to EDS. In this manner the user is given a contextual prompt at the time of access by the app. Using caching this decision can be remembered the next time. If caching is used, there should be a method to change the decision in settings.
Targeting to T-Series for now, since the trust-store is not in a reusable form yet.
Changed in apparmor-easyprof-ubuntu (Ubuntu Saucy): | |
status: | New → Won't Fix |
Changed in evolution-data-server (Ubuntu Saucy): | |
status: | New → Won't Fix |
tags: | added: application-confinement |
Changed in apparmor-easyprof-ubuntu (Ubuntu): | |
status: | New → Confirmed |
Per meeting today, trust-store integration for e-d-s is not for RTM. Furthermore, supporting a global calendar for apps at all is still in discussion.