> This is a bit different from -- but IMO superior to -- the Chrome Extension and Android models.
Yes please don't emulate the Chrome/Android permissions functionality (particularly Android).
Android apps often ask for broad permissions upfront just to do a one-off thing, like inviting your friends to use the app. Then they get to keep that permission for as long as the app is installed.
And it's "take it or leave it". If you're not happy you get to stop using the app/service, or you just have to bite your tongue and install anyways. Ugh.
Exactly. In the Sandstorm model, the app would ask for a list of people to invite by telling the platform to present you with a picker UI. The platform knows all your contacts, but the app only ever receives the ones that you select. Yet, from your perspective, the UI is effectively the same as what you'd see on Android.
Yes please don't emulate the Chrome/Android permissions functionality (particularly Android).
Android apps often ask for broad permissions upfront just to do a one-off thing, like inviting your friends to use the app. Then they get to keep that permission for as long as the app is installed.
And it's "take it or leave it". If you're not happy you get to stop using the app/service, or you just have to bite your tongue and install anyways. Ugh.