org.symbian.tools.wrttools.doc.WebDeveloper/html/GUID-F7A8BF61-042E-4B80-9959-DEDF65BD9153.html
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><meta name="copyright" content="(C) Copyright 2009"/><meta name="DC.rights.owner" content="(C) Copyright 2009"/><meta name="DC.Type" content="concept"/><meta name="DC.Title" content="Widget security"/><meta name="DC.Relation" scheme="URI" content="GUID-DA3E6868-F769-4576-A0C3-6776BF358B44"/><meta name="DC.Relation" scheme="URI" content="GUID-91B65EA3-06B7-475E-9557-29EE584731E5"/><meta name="DC.Format" content="XHTML"/><meta name="DC.Identifier" content="GUID-F7A8BF61-042E-4B80-9959-DEDF65BD9153"/><title>Widget
security </title><script type="text/javascript">
function initPage() {}
</script><link href="../PRODUCT_PLUGIN/book.css" rel="stylesheet" type="text/css"/><link href="css/s60/style.css" rel="stylesheet" type="text/css" media="all"/></head><body onload="initPage();"><div class="body"><div class="contentLeft prTxt"><h1 class="pageHeading" id="GUID-F7A8BF61-042E-4B80-9959-DEDF65BD9153">Widget
security</h1><div><p>WRT 1.0 and later support the following security policy.</p><p>The security management of widgets running on S60 mobile devices is
based on a sandbox security model. Specifically:</p><ul><li><p>Widgets do not need to be signed. </p></li><li><p>All widgets are currently considered untrusted by the device
platform. This means that access to platform services (such as user data)
is controlled and that mobile device users must grant permission before a
widget can access network services.</p></li><li><p>Widgets access the network through the Web Browser for S60.</p></li><li><p>Widgets access S60 platform services through scriptable plugins
or Javascript Service APIs (see below for a list of plugins and Service APIs).
For WRT 1.0, the Web Runtime controls access to platform services through
the Web Browser for S60. Starting in WRT 1.1, the Web Runtime utilizes a
common component called the Runtime Security Manager to enable access control
to platform services. For more information, see section <a href="GUID-BDBE85E0-2A33-4AE9-92F6-85E1861256F0.html#GUID-BDBE85E0-2A33-4AE9-92F6-85E1861256F0">Runtime Security Manager</a>.</p></li></ul><p>The Javascript Service APIs are:</p><ul><li><p>AppManager Service API (see <a href="GUID-E092BF10-C076-4476-9E80-87919940201B.html#GUID-E092BF10-C076-4476-9E80-87919940201B">Accessing and launching installed applications</a>)</p></li><li><p>Calendar Service API (see <a href="GUID-AE9A928B-F938-49B5-BC9E-72CB42046571.html#GUID-AE9A928B-F938-49B5-BC9E-72CB42046571">Accessing and managing calendar information</a>)</p></li><li><p>Contacts Service API (see <a href="GUID-662F2E2E-9538-42E5-9B5A-5664F1C11A9E.html#GUID-662F2E2E-9538-42E5-9B5A-5664F1C11A9E">Accessing and managing information about contacts</a>)</p></li><li><p>Landmarks Service API (see <a href="GUID-D581028C-06ED-422D-866E-AE6C93075084.html#GUID-D581028C-06ED-422D-866E-AE6C93075084">Accessing and managing information about landmarks</a>)</p></li><li><p>Location Service API (see <a href="GUID-4DDE31C7-EC0D-4EEC-BC3A-A0B0351154F8.html#GUID-4DDE31C7-EC0D-4EEC-BC3A-A0B0351154F8">Accessing device location information</a>)</p></li><li><p>Logging Service API (see <a href="GUID-CF55DBA3-2D4C-4FD0-8A06-862E6128F4E7.html#GUID-CF55DBA3-2D4C-4FD0-8A06-862E6128F4E7">Accessing device logs</a>)</p></li><li><p>Media Management Service API (see <a href="GUID-E3D26890-581A-427F-8AFF-16081528A8B8.html#GUID-E3D26890-581A-427F-8AFF-16081528A8B8">Accessing information about media files stored on a device</a>)</p></li><li><p>Messaging Service API (see <a href="GUID-2240F5BE-97BD-4CB3-8DB3-B5CF7C23BF54.html#GUID-2240F5BE-97BD-4CB3-8DB3-B5CF7C23BF54">Accessing messages and using messaging services</a>)</p></li><li><p>Sensor Service API (see <a href="GUID-6FBE64B7-0949-4AAE-B835-52B276540A59.html#GUID-6FBE64B7-0949-4AAE-B835-52B276540A59">Accessing data from the physical sensors of a device</a>)</p></li><li><p>SystemInfo Service API (see <a href="GUID-E0ED671A-BBDA-4C07-828F-BD35782D9B36.html#GUID-E0ED671A-BBDA-4C07-828F-BD35782D9B36">Accessing and modifying system information</a>)</p></li></ul><p>The plugins are:</p><ul><li><p>SystemInfo scriptable plugin (see <a href="GUID-E9A578AA-58C5-4902-B418-4CE44EA40D5D.html#GUID-E9A578AA-58C5-4902-B418-4CE44EA40D5D">Accessing system information and controlling device features</a></p></li><li><p>Browser Audio Video plugin</p></li></ul></div></div></div><div class="footer"><hr/><div class="copy">© Nokia 2009.</div></div></body></html>