Allow setting default permissions system-wide

[pwithnall]

It would be useful for there to be some system-level defaults for the XDP permissions store, so that the distro or sysadmin can enable some things by default. In particular, for Hack (which is a flatpak app installed by default on Endless systems), we’d like to give it the background permission by default, since it runs some processes in the background and is a trusted part of the system. It’s not a great user experience for every user to be pestered with a notification saying “Hack is running in the background, do you want to allow this?”.

Currently, the best solution we have is a system-installed xdg-autostart file which runs flatpak permission-set for Hack.

[matthiasclasen]

Another thing that could be useful is if apps could have install-time presets for permissions.

-> needs design

[gdevenyi]

I need something like this if I want to use flatpak on big deployment of a big network of SSO machines with NFS storage paths.