RequestPolicy/tractest — Issue #189: Define / Export / Import Temporary Policies
Author: jsamuel
Created: 2011-12-22 02:45:50+00:00
State: open
Labels: extension

The define/export/import policy features of the preferences dialog would seem to provide an (albeit cumbersome) interim workaround for:

'''#8 wildcard, regex, CDIR entries''' (at least limited regex ones)
At least for character classes and ranges (eg /[0-9a-zA-Z]{{{{4}}}}/), you could generate a VERY LONG list of entries for all possible strings. This is not very practical for long repetitions or multiple ranges, as the list grows considerably larger with each expanded regular expression -- particularly as contrasted to the singular original regular expression entry. Effects on responsiveness with large numbers of policy rules is unknown, but may readily be encountered with this method.

'''#166 Policy Groups'''
It would be a lot easier to define a template with a set of known destinations, configure the origins as required, and import.

The above could be somewhat maintainable by keeping separate files for each regular expression expansion and policy group template and using repeated selective imports to achieve desired policy.

HOWEVER:

(a) The whitelist in the preferences dialog does not allow adding temporary permissions.

(b) The whitelist in the preferences dialog does not allow editing existing permissions. Typo? Too bad. Delete and retype the whole thing (doesn't even autofill the selected policy -- may not be desirable unless editing?). Convert to temporary (or toggle permanent)? Too bad.

(c) The export feature in the preferences dialog explicitly states that it does not export temporary permissions, albeit in the last sentence of the second paragraph above the button! (Yet the button just states "Export to File" not i.e., "Export Permanent Policies to File").

(d) The import feature does not have an explicitly stated prohibition on importing files with temporary permissions; however, it does reference files created by the export feature. Unlikely that it would support manual modifications to the export to toggle temporary flags... Intend to review source to confirm.

AS SUCH:

This method should work for ALLOW, but not TEMPORARILY ALLOW. There are some significant challenges to achieve temporary rules in the same context...

Given the number of items listed under the HOWEVER section above, it may be useful to maintain this as a meta bug, opening and blocking on bugs for each item/subitem.

Filing as a defect given that the missing "features" seem integral to the use of the existing whitelist and the "Export to File" button label is deceptive, particularly for those who '''know''' what an export is and miss the last sentence of the two paragraph description on that page...