WebAPI/Security/PowerManagement: Difference between revisions

Latest revision as of 23:41, 1 October 2014

General Use Cases: None

Inherent threats: Denial of service to device (including telephone), annoyance

Threat severity: Moderate

References:

Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events

Type	Use Cases	Authorization Model
Web Content	None	No access
Installed Web Apps	None	No access
Privileged Web Apps	None	No access
Certified Web Apps	Power Management App	Implicit

@@ Line 1: / Line 1: @@
-Name of API: Power Management APIs
+== Power Management APIs ==
-Reference: https://wiki.mozilla.org/WebAPI/PowerManagementAPI
-Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events
 General Use Cases: None
@@ Line 9: / Line 7: @@
 Threat severity: Moderate
-== Regular web content (unauthenticated) ==
+References:
-*Use  cases for unauthenticated code:None
+*https://wiki.mozilla.org/WebAPI/PowerManagementAPI
-*Authorization model for normal content:None
+*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion
-*Authorization model for installed content:None
+Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events
-*Potential mitigations: N/A
-== Trusted (authenticated by publisher) ==
+{| border="1" class="wikitable"
-*Use cases for authenticated code: None
+! Type
-Authorization model: None
+! Use Cases
-*Potential mitigations:N/A
+! Authorization Model
+! Notes & Other Controls
+|-
+| Web Content || None || No access||
+|-
+| Installed Web Apps || None || No access||
+|-
+| Privileged Web Apps || None || No access||
+|-
+| Certified Web Apps || Power Management App || Implicit ||
+|}
-== Certified (vouched for by trusted 3rd party) ==
+[[Category:Web APIs]]
-Use cases for certified code:  Replacement Power Management App
+[[Category:Security]]
-Authorization model: Implicit
-Potential mitigations: