[Dev] [Cynara] Async admin API proposal
l.wojciechow at partner.samsung.com
Thu Sep 4 07:23:38 GMT 2014
W dniu 2014-09-04 09:07, Zhang, Xu U pisze:
> There are two point for Crosswalk to call Cynara related APIs.
> 1. Crosswalk installer registers application's permission list to Cynara. I think installer will not call Cynara admin APIs directly but call security manager APIs. Right?
[Lukasz] Yes. You are right.
> 2. Crosswalk browser process checks application privilege by calling Cynara client APIs during runtime.
+ 3. When crosswalk launches application it has to call security-manager
(which calls cynara) in order to check access to privileges that are
accessed by service but directly.
Security-manager will check in cynara acces to such privileges and
assign proper groups to process that was just launched. DAC will take
care of access control since then.
> Best Regards
> Zhang Xu
>> -----Original Message-----
>> From: José Bollo [mailto:jose.bollo at open.eurogiciel.org]
>> Sent: Thursday, September 4, 2014 2:42 PM
>> To: Zhang, Xu U
>> Cc: Whiteman, John L; Oda, Terri; Lukasz Wojciechowski; dev at lists.tizen.org
>> Subject: Re: [Dev] [Cynara] Async admin API proposal
>> On gio, 2014-09-04 at 01:59 +0000, Zhang, Xu U wrote:
>>> I am sorry that I have made a mistake on web API running process. It
>>> is should be:
>>> One is Tizen device APIs, which will run the extension process. The
>>> other is some W3C web APIs, which including Geolocation, media and so
>>> on will run in the browser process.
>> cool, it confirms our understanding.
>> But in my understanding, the web process does not require admin accesses to
>> cynara, only client access.
>> What am I missing?
>> Best regards
More information about the Dev