-
Notifications
You must be signed in to change notification settings - Fork 16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Separate device administrators from UA administrators. #368
Conversation
index.html
Outdated
device often authorizes the [=administrators=], but there are also ways to get | ||
administrator access without the [=device owner=]'s knowledge. Some [=user |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Regarding "there are also ways to get administrator access without the device owner's knowledge", the paragraph above requires user agents to disclose when they are acting on behalf of an administrator and that would apply here as well. Unless the intention is to say "the device owner might not have configured the user agent, but the user account's organization administrator may have and the device owner doesn't know what accounts users might log into on their device".
I would focus this more on the "account administrators also have powers" angle rather than the "device owner might be unaware" angle.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah ... how's this? I use the [=device owner=] term elsewhere in this section, so it's hard to just delete the sentence defining it, although maybe we could rejigger that in a different way.
Mostly this consisted of using "administrator" instead of "device administrator", and I added a sentence saying that UAs sometimes assign an administrator based on the user's account.
3dc2dff
to
d4d815c
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These changes look fine to me.
I remain a little uncertain by how strong we can practically make the language here. It's hard to promise that someone who has root on a device can't be informed or can't control the software that runs on it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
SHA: df7eb37 Reason: push, by jyasskin Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Mostly this consisted of using "administrator" instead of "device
administrator", and I added a sentence saying that UAs sometimes assign
an administrator based on the user's account.
Fixes #353. @reillyeon, how does this look?
Preview | Diff