I'm planning to do the full set of permissions in [1] once this patch is landed. I'll make a note in my tracking bug.
Unless you meant is there a bug for it being allowed for all apps, that seems to be intentional - there are a number of permissions which are are set to ALLOW_ACTION for all app types in [1].

[1] https://mxr.mozilla.org/mozilla-central/source/dom/apps/src/PermissionsTable.jsm#36