OLD | NEW |
---|---|
1 <h1>Permission Warnings</h1> | 1 <h1>Permission Warnings</h1> |
2 | 2 |
3 | 3 |
4 <!-- | 4 <!-- |
5 NOTE: When this doc is updated, the online help should also be updated: | 5 NOTE: When this doc is updated, the online help should also be updated: |
6 http://www.google.com/support/chrome_webstore/bin/answer.py?hl=en&answer=186213 | 6 http://www.google.com/support/chrome_webstore/bin/answer.py?hl=en&answer=186213 |
7 | 7 |
8 We should periodically look at | 8 We should periodically look at |
9 http://src.chromium.org/viewvc/chrome/trunk/src/chrome/app/generated_resources.g rd?view=markup | 9 http://src.chromium.org/viewvc/chrome/trunk/src/chrome/app/generated_resources.g rd?view=markup |
10 to make sure that we're covering all messages. Search for | 10 to make sure that we're covering all messages. Search for |
(...skipping 23 matching lines...) Expand all Loading... | |
34 | 34 |
35 <h2 id="examples"> Examples of permission warnings </h2> | 35 <h2 id="examples"> Examples of permission warnings </h2> |
36 | 36 |
37 <p> | 37 <p> |
38 Here's a typical dialog | 38 Here's a typical dialog |
39 that a user might see when installing an extension: | 39 that a user might see when installing an extension: |
40 </p> | 40 </p> |
41 | 41 |
42 <img src="{{static}}/images/perms-hw1.png" | 42 <img src="{{static}}/images/perms-hw1.png" |
43 width="490" height="193" | 43 width="490" height="193" |
44 alt="Permission warning: 'It can: Access your data on api.flickr.com'" | 44 alt="Permission warning: 'It can: Access your data on api.flickr.com'" |
Devlin
2014/05/22 15:38:49
I suspect this alt-text should also change.
| |
45 /> | 45 /> |
46 | 46 |
47 <p> | 47 <p> |
48 The warning about access to data on api.flickr.com | 48 The warning about access to data on api.flickr.com |
49 is caused by the following lines | 49 is caused by the following lines |
50 in the extension's manifest: | 50 in the extension's manifest: |
51 </p> | 51 </p> |
52 | 52 |
53 <pre data-filename="manifest.json"> | 53 <pre data-filename="manifest.json"> |
54 "permissions": [ | 54 "permissions": [ |
(...skipping 38 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
93 alt="Warning text: 'The newest version of the extension Hello World requires m ore permissions, so it has been disabled. [Re-enable].'" | 93 alt="Warning text: 'The newest version of the extension Hello World requires m ore permissions, so it has been disabled. [Re-enable].'" |
94 /> | 94 /> |
95 | 95 |
96 <p> | 96 <p> |
97 Clicking the Re-enable button | 97 Clicking the Re-enable button |
98 brings up the following warning: | 98 brings up the following warning: |
99 </p> | 99 </p> |
100 | 100 |
101 <img src="{{static}}/images/perms-hw2.png" | 101 <img src="{{static}}/images/perms-hw2.png" |
102 width="490" height="193" | 102 width="490" height="193" |
103 alt="Permission warning: 'It can: Access your data on api.flickr.com and flick r.com; Read and modify your browsing history'" | 103 alt="Permission warning: 'It can: Access your data on api.flickr.com and flick r.com; Read and modify your browsing history'" |
Devlin
2014/05/22 15:38:49
And this one.
| |
104 /> | 104 /> |
105 | 105 |
106 | 106 |
107 <h2 id="warnings"> Warnings and their triggers </h2> | 107 <h2 id="warnings"> Warnings and their triggers </h2> |
108 | 108 |
109 <p> | 109 <p> |
110 It can be surprising when adding a permission such as "tabs" | 110 It can be surprising when adding a permission such as "tabs" |
111 results in the seemingly unrelated warning | 111 results in the seemingly unrelated warning |
112 that the extension can access your browsing activity. | 112 that the extension can access your browsing activity. |
113 The reason for the warning is that | 113 The reason for the warning is that |
(...skipping 22 matching lines...) Expand all Loading... | |
136 <p> | 136 <p> |
137 <table> | 137 <table> |
138 <tr> | 138 <tr> |
139 <th> Warning message </th> | 139 <th> Warning message </th> |
140 <th> Manifest entry that caused it </th> | 140 <th> Manifest entry that caused it </th> |
141 <th> Notes </th> | 141 <th> Notes </th> |
142 </tr> | 142 </tr> |
143 <tr> | 143 <tr> |
144 <td style="font-weight:bold"> | 144 <td style="font-weight:bold"> |
145 <!-- IDS_EXTENSION_PROMPT_WARNING_FULL_ACCESS --> | 145 <!-- IDS_EXTENSION_PROMPT_WARNING_FULL_ACCESS --> |
146 Access all data on your computer and the websites you visit | 146 Read and modify all your data on your computer and the websites you visit |
147 </td> | 147 </td> |
148 <td> | 148 <td> |
149 "plugins" | 149 "plugins" |
150 </td> | 150 </td> |
151 <td> | 151 <td> |
152 The "plugins" permission is required by | 152 The "plugins" permission is required by |
153 <a href="npapi.html">NPAPI plugins</a>. | 153 <a href="npapi.html">NPAPI plugins</a>. |
154 </td> | 154 </td> |
155 </tr> | 155 </tr> |
156 | 156 |
(...skipping 75 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
232 <p> | 232 <p> |
233 The "contentSettings" permission is required by | 233 The "contentSettings" permission is required by |
234 <a href="contentSettings.html"><code>chrome.contentSettings</code></a>. | 234 <a href="contentSettings.html"><code>chrome.contentSettings</code></a>. |
235 </p> | 235 </p> |
236 </td> | 236 </td> |
237 </tr> | 237 </tr> |
238 | 238 |
239 <tr> | 239 <tr> |
240 <td style="font-weight:bold"> | 240 <td style="font-weight:bold"> |
241 <!-- IDS_EXTENSION_PROMPT_WARNING_ALL_HOSTS --> | 241 <!-- IDS_EXTENSION_PROMPT_WARNING_ALL_HOSTS --> |
242 Access your data on all websites | 242 Read and modify your data on all websites |
243 </td> | 243 </td> |
244 <td> | 244 <td> |
245 <!-- HasEffectiveAccessToAllHosts() --> | 245 <!-- HasEffectiveAccessToAllHosts() --> |
246 Any of the following: | 246 Any of the following: |
247 <ul> | 247 <ul> |
248 <li> "debugger" permission </li> | 248 <li> "debugger" permission </li> |
249 <li> "pageCapture" permission </li> | 249 <li> "pageCapture" permission </li> |
250 <li> "proxy" permission </li> | 250 <li> "proxy" permission </li> |
251 <li> A match pattern in the "permissions" field | 251 <li> A match pattern in the "permissions" field |
252 that matches all hosts </li> | 252 that matches all hosts </li> |
(...skipping 22 matching lines...) Expand all Loading... | |
275 <li> <code>*://*/*</code> </li> | 275 <li> <code>*://*/*</code> </li> |
276 <li> <code><all_urls></code> </li> | 276 <li> <code><all_urls></code> </li> |
277 </ul> | 277 </ul> |
278 <strong>Note that you may be able to avoid declaring all host permissions us ing the <code><a href="activeTab.html">activeTab</a></code> permission.</strong> | 278 <strong>Note that you may be able to avoid declaring all host permissions us ing the <code><a href="activeTab.html">activeTab</a></code> permission.</strong> |
279 </td> | 279 </td> |
280 </tr> | 280 </tr> |
281 <tr> | 281 <tr> |
282 <td style="font-weight:bold"> | 282 <td style="font-weight:bold"> |
283 <!-- IDS_EXTENSION_PROMPT_WARNING_?_HOST --> | 283 <!-- IDS_EXTENSION_PROMPT_WARNING_?_HOST --> |
284 <!-- IDS_EXTENSION_PROMPT_WARNING_4_OR_MORE_HOSTS --> | 284 <!-- IDS_EXTENSION_PROMPT_WARNING_4_OR_MORE_HOSTS --> |
285 Access your data on <em>{list of websites}</em> | 285 Read and modify your data on <em>{list of websites}</em> |
286 </td> | 286 </td> |
287 <td> | 287 <td> |
288 A match pattern in the "permissions" field | 288 A match pattern in the "permissions" field |
289 that specifies one or more hosts, | 289 that specifies one or more hosts, |
290 but not all hosts | 290 but not all hosts |
291 </td> | 291 </td> |
292 <td> | 292 <td> |
293 <p> | 293 <p> |
294 Up to 3 sites are listed by name. | 294 Up to 3 sites are listed by name. |
295 Subdomains aren't treated specially. | 295 Subdomains aren't treated specially. |
(...skipping 167 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
463 by clicking the <b>chrome://extensions</b> page's | 463 by clicking the <b>chrome://extensions</b> page's |
464 <b>Update extensions now</b> button. | 464 <b>Update extensions now</b> button. |
465 </p> | 465 </p> |
466 | 466 |
467 <h2 id="api">API</h2> | 467 <h2 id="api">API</h2> |
468 | 468 |
469 <p> | 469 <p> |
470 You can get a list of permission warnings for any manifest with | 470 You can get a list of permission warnings for any manifest with |
471 $(ref:management.getPermissionWarningsByManifest). | 471 $(ref:management.getPermissionWarningsByManifest). |
472 </p> | 472 </p> |
OLD | NEW |