tb-correctidentity icon indicating copy to clipboard operation
tb-correctidentity copied to clipboard

Published 20 hours ago • verified publisher icon dennisverspuij

Permissions

Open mstarks01 opened this issue 3 years ago • 3 comments

Can you please explain the necessity for CI to have full, unrestricted access to Thunderbird and the computer?

mstarks01 avatar Dec 23 '21 01:12 mstarks01

I think it was the old default to request before things got more granular, and nobody took the care to update it, but I may be wrong.

I agree that it should only ask for the permissions it actually needs, and document what it needs them for like some other addons do.

alexolog avatar Dec 23 '21 04:12 alexolog

@dennisverspuij any chance you can have a look at and adjust permissions?

mstarks01 avatar Jul 07 '22 20:07 mstarks01

This is related to the use of "experiments API": https://developer.thunderbird.net/add-ons/mailextensions/experiments Quote: ... "Including one or more Experiment APIs will therefore disable the individual permission prompt and instead prompt the user only for the Have full, unrestricted access to Thunderbird, and your computer permission.

schema.json lists the currently added "experiments" APIs by this add-on.

To reduce the number of used experiments APIs, the Thunderbird developers would need to implement the missing functionality as a standard "WebExtension" API.

The permissions requested by the add-on "alone" are: "accountsRead", "messagesRead", "compose", "tabs", "storage" manifest.json#L15

ldreier avatar Jul 08 '22 17:07 ldreier