**** BEGIN LOGGING AT Sun Nov 08 02:59:58 2015 Nov 08 04:48:51 Permissions in webOS were fragemented. We should probably be thinking in terms of a system permissions database (probably a kind in DB8 with fields for privilege (what the permisson is for, such as location), app/service ID, and value) Nov 08 04:49:46 Or, rather a permissions service, which manages the permissions database. Nov 08 04:51:56 A service like geolocation could query the permission service, which would check the DB. If the permission had been priviosly granted, the permsion service would immediately return that. If previously denied, immediately return that. Nov 08 04:52:58 If no permission value was stored, the permissions service could put up a system popup askint whether to grant the permission once, permanently or never. Nov 08 04:54:03 Are ls2 permissions addable and revokable at run time? Nov 08 04:55:44 I’ve discussed permissions on the W3C mailing lists, and best practice is *not* asking for permissions at install time. Nov 08 04:56:39 Best practice to to ask in a context where the relationship between the permission and the user’s goal is clear. Nov 08 05:03:59 For example, in Serene Notes running in a web browser, when the user first enables the application preference “Tag new notes with location”, the browser opens a permissions dialog with four options: allow once, allow always, allow never, and close without allowing anything. Nov 08 05:05:44 The key point is that users can change the permissions granted to an app over time. Nov 08 05:06:13 I don’t have the impression that ls2 permssions support that. Nov 08 07:55:26 DougReeder: We don't have anything currently really, so we're free to implement that Nov 08 07:55:51 It seems HP/Palm guys did implement something already where they keep track of which websites/apps have access, just not UI to delete items yet Nov 08 10:24:41 Morning! Nov 08 10:42:28 Tofe: Morning! Nov 08 10:42:57 Was a very early mroning today (4:30).... So just had a nap with the little one for 1,5 hrs Nov 08 10:43:12 Could use a bit more still but it's at least something :P Nov 08 10:50:14 He thouht 4:30 was a nice time to get up and play :P Nov 08 10:50:38 Mrs needed to go for her internship for study today, so I was the lucky one to get up ;) Nov 08 10:50:50 I guess he's like me, doesn't need much sleep :P Nov 08 11:00:09 Herrie: let's hope he'll soon help on LuneOS! Nov 08 11:01:38 Tofe: Yeah ;) Nov 08 11:04:38 try http://www.linux.fm/ for getting him to sleep ;) Nov 08 11:12:47 Tofe: Yeah I should and let it play while he's asleep, maybe he'll learn something subconsciously already : Nov 08 11:12:48 : Nov 08 11:12:52 :P Nov 08 11:25:20 Tofe: After your fixes from Friday for the sync/async all of the sudden I can't seem to be able to add a Google C+DAV account in accounts. Log gives me: Nov 08 06:23:52 mako LunaWebAppManager[1524]: WARNING: 06:23:52.894: CONSOLE JS: Uncaught SyntaxError: Unexpected token ] Nov 08 11:25:43 huh? Nov 08 11:27:48 Tofe I see a few more in inspector Nov 08 11:28:05 Nov 08 06:23:52 mako LunaWebAppManager[1524]: WARNING: 06:23:52.857: CONSOLE JS: Uncaught TypeError: Cannot read property 'open' of undefined Nov 08 11:28:27 Herrie: ok, i get it too, let me debug that Nov 08 11:29:16 That's for navigator.InAppBrowser.open(url); it seems Nov 08 11:29:42 I tried it on pretty much every build, quite sure it's the latest change that broke it Nov 08 11:49:32 Looks like InAppBrowser user script must be also executed on subframes Nov 08 11:49:47 let me test a quick fix Nov 08 12:04:14 ok, I found a fix, but I think I would need to first better understand how subframes work in general Nov 08 12:04:33 i.e. is "navigator" global to all frames ? window ? Nov 08 12:11:15 Quite sure morphis wrote the original, so he can tell you ;) Nov 08 12:11:19 morphis: ^ Nov 08 12:12:11 seems like navigator is top object, aggregates window, which aggregates frames. Nov 08 12:19:53 https://github.com/webOS-ports/luna-webappmanager/pull/42 should help Nov 08 13:54:00 Tofe: Looks good :) Will try sometime in a build :) Nov 08 13:54:11 How can I check this luneos-components change on device? Nov 08 13:54:14 For the fonts Nov 08 13:57:22 well... if you don't see any qml error in the journal when starting an enyo app, then it's all good Nov 08 13:57:46 also web sites should use preferably Prelude Nov 08 13:58:04 ( I think ? ) Nov 08 14:20:24 OK Nov 08 14:24:31 Tofe: You have any comments on? https://github.com/webOS-ports/meta-webos-ports/pull/157 Nov 08 14:25:20 nizovn: What we need to do to enable it in qtwebengine? Nov 08 14:27:03 .. i still think what to do with ls2 permissions Nov 08 14:31:16 to enable it we need to uncomment https://github.com/webOS-ports/meta-webos-ports/blob/master/meta-luneui/recipes-qt/qt5/qtwebengine_git.bbappend#L5 and probably remove gstreamer from there Nov 08 14:33:19 nizovn: I think we're OK with * for now since LuneWebEngineView will ask for permissions anyway each time Nov 08 14:33:34 We can then think of a more proper system wide solution for future :) Nov 08 14:39:50 plugin requires any app to register ls2 service Nov 08 14:41:04 for now i think to register it with name something like "app_name"+"_qtpositioning" and force app to include role files with permissions for such name Nov 08 14:42:07 i'm not sure usual apps can install role files Nov 08 16:25:59 nizovn: Ok that would be required for any new apps, now for browser? Nov 08 16:53:21 it's required for any app, i originally tested plugin in browser, and it was working(probably because browser has role files), so i forgot about permissions Nov 08 17:02:48 nizovn: PR looks good, I'm not sure about the bbappend though, it's a bit too complex for me Nov 08 17:03:17 we even have our own qtlocation repo Nov 08 17:08:21 Tofe: you have any ideas about role files? Nov 08 17:25:39 Tofe: What would you suggest instead of bbappend then? Nov 08 17:42:08 Herrie: I didn't say it was wrong, just that I didn't fully understand what was in ther Nov 08 17:42:09 e Nov 08 17:42:17 nizovn: no, I Nov 08 17:42:26 I'm quite noob in the role area Nov 08 17:45:20 Garfonso, morphis or DougReeder might know a few things Nov 08 18:02:33 i'm going to pr my current ideas, so qml and web apps will have location access Nov 08 18:15:39 OK Nov 08 19:07:39 i think with these 3 PR's geolocation should work; i was wrong about qtwebengine recipe, we don't need to change anything Nov 08 19:19:36 nizovn: OK Nov 08 19:19:51 Lets see what morphis has to say and will merge them :) Nov 08 19:20:00 He should be around tomorrow I guess Nov 08 19:20:08 ok Nov 08 19:20:42 Did you manage to look at the wifi plugin sometime with the username + password? Or is that something I could have elvispre look at? He wanted to have some small c++ things to work on, thought that might be something for him if you didn't work on it yet? Nov 08 19:25:20 no, seems i forgot about it; was working on bt system menu Nov 08 19:26:37 role? I don't know about roles, tbh... Nov 08 19:27:40 hmm sorry json files which describe permissions Nov 08 19:28:26 I'm pretty sure I never used them for anything. Nov 08 19:29:49 these files: https://github.com/webOS-ports/org.webosports.service.downloadmgr/blob/Garfonso/work/files/sysbus/org.webosports.service.update.json.prv not sure how to call them correctly Nov 08 19:30:42 ah.. those files. Sorry.. must have misunderstood something Nov 08 19:30:53 what do you need to know about them? Nov 08 19:32:01 apps can bundle services and for those role files are installed. Nov 08 19:32:45 AFAIK those role files are generated by the palm configuration stuff and somewhere in /var/palm/roles or similar. Nov 08 19:32:57 do you think this is acceptable https://github.com/webOS-ports/luna-webappmanager/pull/43/files ? Nov 08 19:33:52 from what I know this role is fine. Nov 08 19:34:34 but the last time I tried to have two names for the same service, I needed two .service files, too. Not sure if that was because of some mistake on my side or because it was a node.js service Nov 08 19:34:50 LGTM Nov 08 19:37:02 Andolamin: You have some thoughts about a permissions service or something? Not sure you guys have anything like that in TV's or you have ideas about it? Nov 08 19:37:25 Legacy was a bit limited in that regards. I think it would be good if we'd have some central permissions service Nov 08 19:37:54 Garfonso: Shouldn't be any problem with using multiple names for the same service. In Node you just have to register the service multiple times. Not sure how the Foundations library interferes with that, though. I refuse to use it. Nov 08 19:38:03 ok, thanks Nov 08 19:38:43 we do have the mediapermission bits. But that handles db8 permissions and should probably stay restricted to that (one could think about extending that to contacts, calendars, events, messaging or so) Nov 08 19:39:10 Andolamin: probably the library interfered, then. Nov 08 19:44:27 Herrie: No ideas on improved permissions here. The legacy security model is a bit basic, though. **** ENDING LOGGING AT Mon Nov 09 02:59:59 2015