standards-positions icon indicating copy to clipboard operation
standards-positions copied to clipboard

Support "write"-only permission mode in FileSystem/FileSystemAccess API

Open mingyc opened this issue 6 months ago • 1 comments

WebKittens

No response

Title of the proposal

Support "write"-only permission mode in FileSystem/FileSystemAccess API

URL to the spec

N/A

URL to the spec's repository

https://github.com/WICG/file-system-access

Issue Tracker URL

No response

Explainer URL

https://github.com/WICG/file-system-access/pull/462/files

TAG Design Review URL

No response

Mozilla standards-positions issue URL

https://github.com/mozilla/standards-positions/issues/1276

WebKit Bugzilla URL

No response

Radar URL

No response

Description

The File System Access API defines two access modes for file system entries: "read" and "readwrite". These modes are used when querying or requesting permission to an entry.

An issue with the current model is that operations requiring only file system modification, such as FileSystemHandle.remove(), are forced to request broad "readwrite" permission. This behavior poses some unnecessary security risks. Add a new "write"-only access mode and adjust the existing APIs would solve the issue.

mingyc avatar Jul 29 '25 01:07 mingyc

Colleagues and I think this is a reasonable improvement for the File System standard.

As we remain opposed to the File System Access API I'm not sure how to resolve this request, but I think standards-wise we can at least move ahead with the change against File System provided Mozilla does not see any issues.

annevk avatar Aug 06 '25 13:08 annevk