[Dev] [Cynara] Async admin API proposal

Zhang, Xu U xu.u.zhang at intel.com
Thu Sep 4 07:40:33 GMT 2014


> + 3. When crosswalk launches application it has to call security-manager
> (which calls cynara) in order to check access to privileges that are accessed by
> service but directly.
> Security-manager will check in cynara acces to such privileges and assign
> proper groups to process that was just launched. DAC will take care of access
> control since then.

That's what I understand.

Thanks
Zhang Xu
> -----Original Message-----
> From: Lukasz Wojciechowski [mailto:l.wojciechow at partner.samsung.com]
> Sent: Thursday, September 4, 2014 3:24 PM
> To: Zhang, Xu U; José Bollo
> Cc: Whiteman, John L; Oda, Terri; dev at lists.tizen.org
> Subject: Re: [Dev] [Cynara] Async admin API proposal
> 
> 
> W dniu 2014-09-04 09:07, Zhang, Xu U pisze:
> > There are two point for Crosswalk to call Cynara related APIs.
> > 1. Crosswalk installer registers application's permission list to Cynara. I think
> installer will not call Cynara admin APIs directly but call security manager APIs.
> Right?
> [Lukasz] Yes. You are right.
> > 2. Crosswalk browser process checks application privilege by calling Cynara
> client APIs during runtime.
> [Lukasz] Yes
> 
> + 3. When crosswalk launches application it has to call security-manager
> (which calls cynara) in order to check access to privileges that are accessed by
> service but directly.
> Security-manager will check in cynara acces to such privileges and assign
> proper groups to process that was just launched. DAC will take care of access
> control since then.
> >
> > Best Regards
> > Zhang Xu
> >> -----Original Message-----
> >> From: José Bollo [mailto:jose.bollo at open.eurogiciel.org]
> >> Sent: Thursday, September 4, 2014 2:42 PM
> >> To: Zhang, Xu U
> >> Cc: Whiteman, John L; Oda, Terri; Lukasz Wojciechowski;
> >> dev at lists.tizen.org
> >> Subject: Re: [Dev] [Cynara] Async admin API proposal
> >>
> >> On gio, 2014-09-04 at 01:59 +0000, Zhang, Xu U wrote:
> >>> I am sorry that I have made a mistake on web API running process.
> >>> It is should be:
> >>>
> >>> One is Tizen device APIs, which will run the extension process.  The
> >>> other is some W3C web APIs, which  including Geolocation, media and
> >>> so on will  run  in the browser process.
> >> Hi,
> >>
> >> cool, it confirms our understanding.
> >>
> >> But in my understanding, the web process does not require admin
> >> accesses to cynara, only client access.
> >>
> >> What am I missing?
> >>
> >> Best regards
> >> José
> >>
> >>



More information about the Dev mailing list