{"action":"opened","issue":{"url":"https://api.github.com/repos/lionheart/openradar-mirror/issues/20366","repository_url":"https://api.github.com/repos/lionheart/openradar-mirror","labels_url":"https://api.github.com/repos/lionheart/openradar-mirror/issues/20366/labels{/name}","comments_url":"https://api.github.com/repos/lionheart/openradar-mirror/issues/20366/comments","events_url":"https://api.github.com/repos/lionheart/openradar-mirror/issues/20366/events","html_url":"https://github.com/lionheart/openradar-mirror/issues/20366","id":356610603,"node_id":"MDU6SXNzdWUzNTY2MTA2MDM=","number":20366,"title":"44079032: Apple Events: Instead of a per app authorisation prompt, move to a per access group (if needed)","user":{"login":"openradar-mirror","id":13605213,"node_id":"MDQ6VXNlcjEzNjA1MjEz","avatar_url":"https://avatars1.githubusercontent.com/u/13605213?v=4","gravatar_id":"","url":"https://api.github.com/users/openradar-mirror","html_url":"https://github.com/openradar-mirror","followers_url":"https://api.github.com/users/openradar-mirror/followers","following_url":"https://api.github.com/users/openradar-mirror/following{/other_user}","gists_url":"https://api.github.com/users/openradar-mirror/gists{/gist_id}","starred_url":"https://api.github.com/users/openradar-mirror/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openradar-mirror/subscriptions","organizations_url":"https://api.github.com/users/openradar-mirror/orgs","repos_url":"https://api.github.com/users/openradar-mirror/repos","events_url":"https://api.github.com/users/openradar-mirror/events{/privacy}","received_events_url":"https://api.github.com/users/openradar-mirror/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/lionheart/openradar-mirror/milestones/727","html_url":"https://github.com/lionheart/openradar-mirror/milestone/727","labels_url":"https://api.github.com/repos/lionheart/openradar-mirror/milestones/727/labels","id":3618911,"node_id":"MDk6TWlsZXN0b25lMzYxODkxMQ==","number":727,"title":"macOS + SDK | App Sandbox","description":null,"creator":{"login":"openradar-mirror","id":13605213,"node_id":"MDQ6VXNlcjEzNjA1MjEz","avatar_url":"https://avatars1.githubusercontent.com/u/13605213?v=4","gravatar_id":"","url":"https://api.github.com/users/openradar-mirror","html_url":"https://github.com/openradar-mirror","followers_url":"https://api.github.com/users/openradar-mirror/followers","following_url":"https://api.github.com/users/openradar-mirror/following{/other_user}","gists_url":"https://api.github.com/users/openradar-mirror/gists{/gist_id}","starred_url":"https://api.github.com/users/openradar-mirror/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openradar-mirror/subscriptions","organizations_url":"https://api.github.com/users/openradar-mirror/orgs","repos_url":"https://api.github.com/users/openradar-mirror/repos","events_url":"https://api.github.com/users/openradar-mirror/events{/privacy}","received_events_url":"https://api.github.com/users/openradar-mirror/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":0,"state":"open","created_at":"2018-09-03T23:01:03Z","updated_at":"2018-09-03T23:01:03Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2018-09-03T23:01:03Z","updated_at":"2018-09-03T23:01:03Z","closed_at":null,"author_association":"COLLABORATOR","body":"#### Description\n\nWith Mojave, sending an Apple Event to another app will elicit an authorization prompt to the user. Even in cases where the Apple Event is simply soliciting the opening of a new Safari window.\r\n\r\nAn app's scripting interface isn't inherently privacy sensitive. Treating all an any of these interactions as sensitive burdens the user experience and contributes to training users to ignore security dialogs.\r\n\r\nSince 2012 apps can group related parts of their scripting interface using the access-group feature in their .sdef files. What I suggest is to augment that feature and let the app decide whether or not that particular part of the API is privacy sensitive.\r\n\r\nThis would allow innocuous scripting APIs to run un-prompted and greatly reduce the burden on the user. It would also incentivize developers to annotate the scripting interface to avoid the catch-all prompt when it's not needed.\n\n-\nProduct Version: \nCreated: 2018-09-03T22:07:26.438740\nOriginated: 2018-09-03T00:00:00\nOpen Radar Link: http://www.openradar.me/44079032"}}
{"actor":{"display_login":"openradar-mirror"}}