Agenda Request - Permission Policy Integration

[martinthomson]

Agenda+: How to manage delegation of capabilities

The question of how a top-level site controls access for other entities to both impression and conversion APIs is unresolved.

Questions to resolve:

1. What sort of policy controls do we need: one for the whole API or separate controls for impressions and conversions?
2. What should the defaults be for delegation to other actors?
3. Should the defaults differ for an HTTP API as opposed to iframes?

We'll come prepared with some reasoning for different positions and maybe some recommendations.

Time

10-15 minutes

Links

• Integrate with Permissions Policy ppa-api#40

[myonlinematters]

+1 on this and also how it fits in with permissions limitations in fenced frames

[AramZS]

Added to the agenda for day 1! https://github.com/patcg/meetings/pull/209/files

[andyleiserson]

Presentation and initial pull request.