Thank you very much! I would like to see this at <a href="http://live.gnome.org">live.gnome.org</a> for others to find out. <div class="gmail_quote">El abr. 15, 2016 7:04 AM, "Alexander Larsson" <<a href="mailto:alexl@redhat.com">alexl@redhat.com</a>> escribió: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On fre, 2016-04-15 at 06:02 -0500, Daniel Espinosa wrote: > Could you add documentation about how to permissions on xdg-app. This > is because I've build an app, but it doesn't update settings, then is > every important to know each permission reach. Part 4 of my tutorial explains this a bit: <a href="https://blogs.gnome.org/alexl/2016/02/23/building-an-xdg-app-part-4/" rel="noreferrer" target="_blank">https://blogs.gnome.org/alexl/2016/02/23/building-an-xdg-app-part-4/</a> I'm not sure exactly what you mean by "settings". But I assume you mean dconf/gsettings. The way to currently allow dconf access is this piece of magic: /* Needed for dconf to work */ "--filesystem=xdg-run/dconf", "--filesystem=~/.config/dconf:ro", "--talk-name=ca.desrt.dconf", "--env=DCONF_USER_CONFIG_DIR=.config/dconf", I realize thats not easy to figure out this, but here is what it does, in order: * Allow apps to look in /run/user/1000/dconf which is a directory that dconf uses to tell you about database updates * Allow your app read-only access to ~/.config/dconf which is the default location for the per-user database. * Allow your app to talk to the dconf dbus service. * Magic environment variable to tell dconf to look in ~/.config/dconf for the dconf database instead of using XDG_CONFIG_DIR, which would point to ~/.var/app/org.something.App/config/ Note that this allows your app to read settings from all other apps, which is clearly not ideal. The plan going forward is to have a gsettings backend which is explicitly designed to run sandboxed. Work has started on this, but I don't know the current state of it. > As a side note, but important too, have Software listing an app > permissions list before install it? A la Android, with explanation > about risks on each one. Yes, this is in the plans. There is APIs in libxdgapp to allow you to query the metadata for apps. This could be used by gnome-software to explain these permissions. This is not used yet, and since the work on portals are yet in its infancy all current xdg-apps request pretty broad permissions. Hopefully we will be able to change this in the near future. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Alexander Larsson Red Hat, Inc <a href="mailto:alexl@redhat.com">alexl@redhat.com</a> <a href="mailto:alexander.larsson@gmail.com">alexander.larsson@gmail.com</a> He's a fiendish chivalrous firefighter who hangs with the wrong crowd. She's a wealthy motormouth pearl diver descended from a line of powerful witches. They fight crime! </blockquote></div>