Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Define two features controlled by permissions policy #54

Merged
merged 3 commits into from
Dec 20, 2024
Merged

Define two features controlled by permissions policy #54

Changes from 2 commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
58ab089
Define two features controlled by permissions policy
andyleiserson Dec 13, 2024
bb7d20b
Additional explanatory text
andyleiserson Dec 16, 2024
5bc6447
Update api.bs
andyleiserson Dec 20, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions api.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -855,6 +855,33 @@ if the user has opted out of collection of diagnostic data.
* User ability to view the impression store and past report submissions.


# Permissions Policy Integration # {#permission-policy}

This specification defines two [=policy-controlled features=]:

* Invocation of the <a method for=PrivateAttribution>saveImpression()</a> API,
identified by the string "<code><dfn export for="PermissionPolicy"
enum-value>save-impression</dfn></code>".
* Invocation of the <a method for=PrivateAttribution>measureConversion()</a> API,
identified by the string "<code><dfn export for="PermissionPolicy"
enum-value>measure-conversion</dfn></code>".

The [=policy-controlled feature/default allowlist=] for both of these features is
<code><a dfn for="default allowlist">*</a></code>.

<p class=note>Having separate permissions for
<a method for=PrivateAttribution>saveImpression()</a> and
<a method for=PrivateAttribution>measureConversion()</a> might not be necessary,
but allows pages that do both to limit resources
andyleiserson marked this conversation as resolved.
Show resolved Hide resolved
to the expected kind of activity.

<p class=note>Enabling permissions by default
simplifies the task of integrating external services.

<p class=note>Permissions policy provides only all-or-nothing control,
it does not enable delegation of a portion of privacy budget.


# Implementation Considerations # {#implementation-considerations}

* Management and distribution of values for the following:
Expand Down
Loading