Chrome browser permissions used by Productivity Tab.
webRequest and webRequestBlocking
The chrome.webRequest API is used for several purposes.
(1) To block the popups with “Unauthorized” messages in 3rd-part services opened in iframes in order to show user-friendly messages to users.
(2) To detect the end of Pocket, Twitter, Google and Braintree OAuth flow opened in the separate window by the extension.
(3) To correct the user-agent header to force the mobile the LinkedIn site version loading inside the iframe to fit to “Linked In” widget width.
(4) To create small modifications to the headers of some sites to used for iframe widget.
Sessions:
The chrome.session API is used to get and restore the chrome closed sessions in our Recently Closed widget.
cookies.
The extension uses the chrome.cookies API for two purposes.
(1) To clear our server cookies on extension version update.
(2) To retrieve the user’s https://www.pushbullet.com key from cookies after the user is authenticated on pushbullet.com allowing the user to not type the complex key manually.
Storage and unlimitedStorage
The Storage API is used to store the settings locally. It is required to work offline and to authenticate on the server.
system.cpu and system.memory
This permission is used to retrieve computer info for System information widget.
bookmarks
This permission is used to retrieve a user bookmarks list for Bookmarks widget .
topSites
This permission is used to retrieve a user bookmarks list for Top Sites widget .
managements
This permission is used to to launch the application in the App widget .
tabs
This permission is widely used to open new tab in order to navigate to another URL and to auto-close the OAuth window after successful authentication.
<all_url>
This permission allows ProductivityTab to connect to external services in order to collect the provided user data, for ex. facebook.com, twitter.com, pocket.com and so on.