Permissions For Browser-Based Applications

Thursday, 7 Jul 2011

Robert O’Callahan:

Good old <input type="file"> accidentally invented an excellent permissions model for file I/O. The app asks the user to choose a file to load, and in the process the user implicitly grants the app permission to read that file! The same sort of approach works in other situations.