ipfs/ipfs-desktop

Inform end-users about why "System Events" access is being requested on macOS

Open

#1,367 创建于 2020年2月29日

在 GitHub 查看
 (1 评论) (1 反应) (0 负责人)JavaScript (912 fork)batch import
P2effort/hoursexp/novicegood first issuehelp wantedkind/maintenancestatus/readytopic/design-content

仓库指标

Star
 (5,632 star)
PR 合并指标
 (平均合并 8天 12小时) (30 天内合并 6 个 PR)

描述

On macOS, it's a fairly standard practice to display a pre-roll if your application needs some form of permissions, before calling the system APIs for the first time that will actually produce the system's requested-permissions window.

For instance, for any given end-user, the following window is likely A) intimidating, and B) possibly encourages insecure habits, such as simply clicking "accept" when they see a request like that:

Some examples of such pre-rolls from other macOS applications (mind you, some of these are for-pay examples; there's no need for ours to be fancy, just clear):

Good practices:

  • Check if it's enabled before displaying pre-roll, just in case
  • Only display pre-roll once; if it's explicitly been ignored/disabled by the user, then don't bother them
  • Show exactly what functionality the user will lose if they ignore it / deny the permissions

Related: #753

贡献者指南