Policy & permissions
Risk is classified in code from the operation and the target label.
Overview#
Risk is classified in code from the operation and the target label. Modes: allow, ask (a person approves), takeover (a person performs it), deny.
| Risk | Default | Examples |
|---|---|---|
| read | allow | click, type, select, scroll, wait |
| navigate | allow | links, tabs, history |
| download | allow | file downloads |
| upload | ask | file inputs, choosers, drop zones |
| send_message | ask | send, submit, post, confirm |
| publish | ask | publish, share, make public |
| purchase | takeover | pay, buy, place order, transfer, subscribe |
| delete | takeover | delete, remove, deactivate, unsubscribe |
| credential_change | takeover | password, OTP, card fields |
{
"defaults": { "upload": "allow", "send_message": "ask", "purchase": "takeover" },
"siteRules": [
{ "pattern": "*.internal.example.com", "risk": "upload", "mode": "allow" }
],
"blockedOrigins": ["*.ads.example.com"],
"restrictNavigation": false,
"secretsRequireTakeover": true,
"maxTypedLength": 2000
}