New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 617431 link

Starred by 9 users

Issue metadata

Status: Assigned
Owner:
OOO until 4th Feb
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug
Team-Security-UX



Sign in to add a comment

Reload page prompt not shown after blocking microphone / camera access.

Project Member Reported by pdr@chromium.org, Jun 5 2016

Issue description

Version: 52.0.2743.6/dev
OS: OSX 10.6

What steps will reproduce the problem?
(1) Go to a page that requests access to the microphone
For example: https://demos.subinsb.com/Francium/voice/
(2) Click record and allow access to the microphone.
(3) Notice there is now a media icon in the omnibox, and the tab has a red recording icon.
(4) Click the media icon in the omnibox.
(5) Click the "Manage microphone settings" button.
(6) Remove all access to the microphone.
(7) Go back to the recording tab and notice the media icon is still present in the omnibox, and the red recording icon looks like the page is still recording.

What is the expected output?
We should synchronously remove the omnibox and tabstrip icons after settings are updated.
 
afterDisablingMicSettings.png
69.1 KB View Download
Cc: f...@chromium.org jansson@chromium.org
Status: Available (was: Untriaged)
As far as I can tell, updating permission settings doesn't terminate access to permission-protected API calls that are currently live. Therefore, I'm not sure it would be a good idea to remove the omnibox and tabstrip icons from currently open tabs after settings are updated. 

Here's an example using https://permission.site/:

1. Go to https://permission.site/
2. Click the Location button
3. Grant location permission when prompted
4. Click the omnibar location icon -> Manage location settings. That opens a new tab to chrome://settings/contentExceptions#location
5. Clear the location permission for https://permission.site:443
6. Return to the https://permission.site browser tab
7. Click the omnibar location icon. The text bubble text still indicates that the page is tracking my location, but also includes the text, "Settings will be cleared on next reload." (see attached screenshot)

I'm setting this bug to Available with the expectation that someone from someone on the Permission side chimes in, as I don't think this is specific to the getUserMedia API.
locationpermission.png
14.3 KB View Download

Comment 2 by mcasas@chromium.org, Jul 29 2016

Components: -Blink>GetUserMedia Blink>GetUserMedia>Mic
Cc: tommi@chromium.org
This is by design since it only controls the permissions and not the actual device (like firefox does) hence all ongoing streams that already have permission will keep running.

I do not see this as problem in reality but I have no data on if users do.

tommi@ WDYT?

Comment 4 by tommi@chromium.org, Jul 29 2016

This is currently working as designed.  Users can close the tab, hit refresh after disabling access, etc.  If the page is doing something it shouldn't be doing, closing the tab is probably what users would do and the permissions UI is something advanced users would know about.
Cc: benwells@chromium.org raymes@chromium.org
When other permissions are changed, the user is informed that it won't take effect until the page is reloaded (see attachment).

Is there any reason we shouldn't do the same here?
Reload.png
40.0 KB View Download
Components: Security>UX
That makes sense -- we should probably just display that same bar when page actions change.

Comment 7 by raymes@chromium.org, Nov 29 2016

Components: -UI>Browser>Permissions UI>Browser>Permissions>Indicators

Comment 8 by raymes@chromium.org, Nov 30 2016

Components: -Security>UX

Comment 9 by kolos@chromium.org, Dec 12 2016

Components: Privacy
I'm not sure if this is intended behavior, but the icon also remains after stopping all MediaStreamTracks and no longer accessing the microphone, or webcam, etc. For example, see this JSFiddle: https://jsfiddle.net/avgra0xx/2/
The camera icon in the omnibar indicates that permissions has been given to the page, that's it.

The red recording indicator in the tab is present as long as a MediaStream is alive.

Your jsfiddle illustrates exactly that.
Owner: guidou@chromium.org
Assigning owner. Might be possible to close.
Status: Assigned (was: Available)
Owner: dominickn@chromium.org
This seems to be working as intended. 
Adding dominickn@, who knows more about how permissions and the corresponding UI should work.

dominickn@: Do you think the camera icon should be removed from the omnibar when the microphone/camera is no longer being accessed?

We keep showing the camera because otherwise you can turn on the camera for tiny periods of time to create photos of the user or record voices in the room after you have observed some inactivity by the user (assuming that the user would not notice that the microphone icon shows up). This is working as intended.

I would support an information as suggested in comment #5.
Cc: dominickn@chromium.org
Owner: ----
Status: Available (was: Assigned)
I agree that this is currently working as intended. There's an argument to be made about the page action icon, but we have broader long term goal to remove those icons and move the indication of permission state completely into the page info dialog (perhaps combined with notifications via anchored toasts). So I don't think there's much point in changing when that icon does and doesn't appear right now - it's not misleading, and it provides utility.

Moving myself to cc and marking this as available for someone to pick up to implement c#5.
Status: WontFix (was: Available)
Closing, since both battre@ and dominick@ also agree that this is currently working as intended.
Cc: timloh@chromium.org
Owner: raymes@chromium.org
Status: Assigned (was: WontFix)
Summary: Reload page prompt not shown after blocking microphone / camera access. (was: "This page is accessing your microphone" still present after removing all microphone access in settings)
I think there is still something here - it is weird that the user can block access and we don't show the same infobar to reload the page like we do with other permissions.

Repurposing bug to address this, and assigning to raymes@ who's been looking at unifying the media permissions code paths with the other permissions code paths.
Cc: kcaratt...@chromium.org
 Issue 653500  has been merged into this issue.
Labels: Hotlist-EnamelAndFriendsFixIt
 Issue 806063  has been merged into this issue.
Labels: -Hotlist-EnamelAndFriendsFixIt
Cc: mgiuca@chromium.org alancutter@chromium.org
 Issue 814110  has been merged into this issue.
Long time since last updated. What's the latest status? Still an issue?

Sign in to add a comment