RequestPolicy/tractest — Issue #229: Revoke All Temporary Permissions for this Site
Author: jsamuel
Created: 2011-12-22 02:48:06+00:00
State: open
Labels: extension

Currently if one decides to revoke temporary permissions for a given site, you have to manually revoke each one -- or revoke everything and re-establish all other temporary permissions.

Revoking manually from the menu is problematic as sometimes you do *not* want to reload a page, especially if you do not trust the requests it generates and are trying to deny those (rather than re-initiate more such requests); however, the menu will not update to show what policies have changed until you do reload. Similarly, revoking manually from the preferences dialog is problematic as you have to look in at least 3 different places and be sure to remove all relevant entries in each.

It would be particularly useful to be able to "revoke all temporary permissions for this site" that removes all policy rules with either the origin or destination of the current page.

Not sure how third-party ("other origins") requests should be treated in this case. Perhaps remove those temporary permissions as well? This would seem to correspond to the intent here.