ubuntu-apps-bugs team mailing list archive
-
ubuntu-apps-bugs team
-
Mailing list archive
-
Message #09155
[Bug 1227821] Re: please add trust-store integration for access to contacts
** Changed in: address-book-app (Ubuntu)
Assignee: (unassigned) => Renato Araujo Oliveira Filho (renatofilho)
** No longer affects: address-book-app
--
You received this bug notification because you are a member of Ubuntu
Apps bug tracking, which is subscribed to address-book-app in Ubuntu.
https://bugs.launchpad.net/bugs/1227821
Title:
please add trust-store integration for access to contacts
Status in address-book-app package in Ubuntu:
Invalid
Status in address-book-service package in Ubuntu:
Invalid
Status in apparmor-easyprof-ubuntu package in Ubuntu:
Invalid
Status in address-book-app source package in Saucy:
Won't Fix
Status in apparmor-easyprof-ubuntu source package in Saucy:
Won't Fix
Status in address-book-app source package in Trusty:
Won't Fix
Status in address-book-service source package in Trusty:
Won't Fix
Status in apparmor-easyprof-ubuntu source package in Trusty:
Won't Fix
Bug description:
Currently the 'contacts' policy group is reserved because giving
access to the address-book-app's DBus API allows applications to
obtain all contacts without user consent. If 'contacts' are going to
be made generally available to untrusted appstore apps, the address-
book-app service needs to be modified to use trust-store, like
location-service does. Integrating with trust-store means that when an
app tries to connect to the address-book-app over DBus, address-book-
app will contact trust-store, the trust-store will prompt the user
("Foo wants to access your contacts. Is this ok? Yes|No"), optionally
cache the result and return the result to address-book-app. In this
manner the user is given a contextual prompt at the time of access by
the app. Using caching this decision can be remembered the next time.
If caching is used, there should be a method to change the decision in
settings.
Targeting to T-Series for now, since the trust-store is not in a
reusable form yet.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/address-book-app/+bug/1227821/+subscriptions
References