From 66d62461e50b178a734808f28d870a14df821490 Mon Sep 17 00:00:00 2001 From: Yunjin Lee Date: Fri, 19 Aug 2016 17:23:29 +0900 Subject: [PATCH] Update native/web privilege table and privilege level description Change-Id: I006b0435ac4067d066d0c755f519dfcc3d05701c Signed-off-by: Yunjin Lee (cherry picked from commit 89217524c0e21f919b9197b9dc5ced50c78f571f) --- .../html/native/details/sec_privileges_n.htm | 9 ++++++++- .../html/web/details/sec_privileges_w.htm | 16 +++++++++++++++- 2 files changed, 23 insertions(+), 2 deletions(-) diff --git a/org.tizen.tutorials/html/native/details/sec_privileges_n.htm b/org.tizen.tutorials/html/native/details/sec_privileges_n.htm index 7aa5ce3..9dfab5d 100644 --- a/org.tizen.tutorials/html/native/details/sec_privileges_n.htm +++ b/org.tizen.tutorials/html/native/details/sec_privileges_n.htm @@ -32,7 +32,7 @@ tr.partner-level, tr.platform-level { background-color: #cff }

To effectively protect the device system and user private data, the Tizen security architecture is based on privileges and application signing of the Linux basic security model, which includes process isolation and mandatory access control. Since Tizen, as an open mobile platform, provides a wide range of features and experiences for users with a variety of applications, the users must be able to grant privileges for security-sensitive operations.

-

Tizen provides API-level access control for security-sensitive operations which, if not used correctly, can harm user privacy and system stability. Therefore, applications that use such sensitive APIs must declare the required privileges in the tizen-manifest.xml file. Privileges have a level according to their hierarchy. The public level is the minimum privilege level, and any application developed by using the SDK can use these privileges. The platform level is the highest privilege level, and an application that needs theses privileges requires a platform-signed certificate.

+

Tizen provides API-level access control for security-sensitive operations which, if not used correctly, can harm user privacy and system stability. Therefore, applications that use such sensitive APIs must declare the required privileges in the tizen-manifest.xml file. Privileges are categorized into 3 levels-public, partner and platform- according to their hierarchy. The public level is the minimum privilege level hence any application developed by using the SDK can use these privileges. The partner level privileges require at least a partner-signed certificate which is granted to developers who have business relationship with the vendor. The platform level is the highest privilege level, and an application that needs theses privileges requires at least a platform-signed certificate which is granted to the vendor developers.

If an application invokes a privileged API, the Tizen system checks whether the privilege is present in the tizen-manifest.xml file. If the privilege is not present in the file, the system prohibits the application execution.

The Tizen IDE also provides privilege checker tools to check whether the Tizen application source code contains any privilege violations. For more information, see API and Privilege Checker.

@@ -711,6 +711,13 @@ tr.partner-level, tr.platform-level { background-color: #cff } Managing location settings The application can control your location service settings. + +http://tizen.org/privilege/mapservice +public +2.3.2 +Using map services +The application can use map services, such as Geocoder, Places, and Route (Direction). + http://tizen.org/privilege/message.read public diff --git a/org.tizen.tutorials/html/web/details/sec_privileges_w.htm b/org.tizen.tutorials/html/web/details/sec_privileges_w.htm index a88456f..2cc7696 100644 --- a/org.tizen.tutorials/html/web/details/sec_privileges_w.htm +++ b/org.tizen.tutorials/html/web/details/sec_privileges_w.htm @@ -32,7 +32,7 @@ tr.partner-level, tr.platform-level { background-color: #cff }

To effectively protect the device system and user private data, the Tizen security architecture is based on privileges and application signing of the Linux basic security model, which includes process isolation and mandatory access control. Since Tizen, as an open platform, provides a wide range of features and experiences for users with a variety of applications, the users must be able to grant privileges for security-sensitive operations.

-

Tizen provides API-level access control for security-sensitive operations which, if not used correctly, can harm user privacy and system stability. Therefore, applications that use such sensitive APIs must declare the required privileges in the config.xml file.

+

Tizen provides API-level access control for security-sensitive operations which, if not used correctly, can harm user privacy and system stability. Therefore, applications that use such sensitive APIs must declare the required privileges in the config.xml file. Privileges are categorized into 3 levels-public, partner and platform- according to their hierarchy. The public level is the minimum privilege level hence any application developed by using the SDK can use these privileges. The partner level privileges require at least a partner-signed certificate which is granted to developers who have business relationship with the vendor. The platform level is the highest privilege level, and an application that needs theses privileges requires at least a platform-signed certificate which is granted to the vendor developers.

If an application invokes a privileged API, the Tizen system checks whether the privilege is present in the config.xml file. If the privilege is not present in the file, the system prohibits the application execution.

The Tizen IDE also provides privilege checker tools to check whether the Tizen application source code contains any privilege violations. For more information, see Privilege Checker.

@@ -618,6 +618,13 @@ tr.partner-level, tr.platform-level { background-color: #cff } The application can create, update, and delete media content information. + http://tizen.org/privilege/datacontrol.consumer + public + 2.3.2 + Accessing exported data + The application can read data exported by data control providers. + + http://tizen.org/privilege/download public 2.2.1 @@ -764,6 +771,13 @@ tr.partner-level, tr.platform-level { background-color: #cff } Adjusting volume The application can adjust the volume for different features, such as notification alerts, ringtones, and media. + + http://tizen.org/privilege/widget.viewer + public + 2.3.2 + Showing widgets + The application can show widgets, and information from their associated applications, on the home screen. + -- 2.7.4