[Touch-packages] [Bug 1227821] Re: please add trust-store integration for access to contacts
** Changed in: address-book-app (Ubuntu)
Assignee: (unassigned) => Renato Araujo Oliveira Filho (renatofilho)
** No longer affects: address-book-app
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to address-book-app in
Ubuntu.
https://bugs.launchpad.net/bugs/1227821
Title:
please add trust-store integration for access to contacts
Status in address-book-app package in Ubuntu:
Invalid
Status in address-book-service package in Ubuntu:
Invalid
Status in apparmor-easyprof-ubuntu package in Ubuntu:
Invalid
Status in address-book-app source package in Saucy:
Won't Fix
Status in apparmor-easyprof-ubuntu source package in Saucy:
Won't Fix
Status in address-book-app source package in Trusty:
Won't Fix
Status in address-book-service source package in Trusty:
Won't Fix
Status in apparmor-easyprof-ubuntu source package in Trusty:
Won't Fix
Bug description:
Currently the 'contacts' policy group is reserved because giving
access to the address-book-app's DBus API allows applications to
obtain all contacts without user consent. If 'contacts' are going to
be made generally available to untrusted appstore apps, the address-
book-app service needs to be modified to use trust-store, like
location-service does. Integrating with trust-store means that when an
app tries to connect to the address-book-app over DBus, address-book-
app will contact trust-store, the trust-store will prompt the user
("Foo wants to access your contacts. Is this ok? Yes|No"), optionally
cache the result and return the result to address-book-app. In this
manner the user is given a contextual prompt at the time of access by
the app. Using caching this decision can be remembered the next time.
If caching is used, there should be a method to change the decision in
settings.
Targeting to T-Series for now, since the trust-store is not in a
reusable form yet.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/address-book-app/+bug/1227821/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1227821] Re: please add trust-store integration for access to contacts
** Changed in: address-book-app (Ubuntu)
Status: Confirmed => Invalid
** Changed in: address-book-service (Ubuntu)
Status: Confirmed => Invalid
** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
Status: Confirmed => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to address-book-app in
Ubuntu.
https://bugs.launchpad.net/bugs/1227821
Title:
please add trust-store integration for access to contacts
Status in Address Book App:
New
Status in “address-book-app” package in Ubuntu:
Invalid
Status in “address-book-service” package in Ubuntu:
Invalid
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
Invalid
Status in “address-book-app” source package in Saucy:
Won't Fix
Status in “apparmor-easyprof-ubuntu” source package in Saucy:
Won't Fix
Status in “address-book-app” source package in Trusty:
Won't Fix
Status in “address-book-service” source package in Trusty:
Won't Fix
Status in “apparmor-easyprof-ubuntu” source package in Trusty:
Won't Fix
Bug description:
Currently the 'contacts' policy group is reserved because giving
access to the address-book-app's DBus API allows applications to
obtain all contacts without user consent. If 'contacts' are going to
be made generally available to untrusted appstore apps, the address-
book-app service needs to be modified to use trust-store, like
location-service does. Integrating with trust-store means that when an
app tries to connect to the address-book-app over DBus, address-book-
app will contact trust-store, the trust-store will prompt the user
("Foo wants to access your contacts. Is this ok? Yes|No"), optionally
cache the result and return the result to address-book-app. In this
manner the user is given a contextual prompt at the time of access by
the app. Using caching this decision can be remembered the next time.
If caching is used, there should be a method to change the decision in
settings.
Targeting to T-Series for now, since the trust-store is not in a
reusable form yet.
To manage notifications about this bug go to:
https://bugs.launchpad.net/address-book-app/+bug/1227821/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
