Optional Permissions
The extension uses the minimum permissions to work so that it presents itself as non-invasive.
None of the optional permissions are required for the extension to work; they simply unlock existing functionalities. If you use a functionality which requires the extension to have a permission which you have not yet granted, you'll be prompted to grant ONLY the permission needed to complete what you've asked to the extension to do.
You may allow any number of the following optional permissions based on your own threat model.
For now, the most critical optional permission is the cookies permission which grants the extension to read your Salesforce cookies.
This is the most critical permission to grant to the extension.
This allows the extension to read your cookies for all your Salesforce Organizations whose link match these RegEx: *://*.my.salesforce.com/* which basically means all the Salesforce Organizations in which you've logged in.
This is needed to retrieve the sid cookie which is then used as the OAuth token against /services/oauth2/userinfo to retrieve your Salesforce language.
Based on this information, the extension can follow your Salesforce language to present its texts in the same language.
This allows the extension to automatically start as soon as you open a Salesforce Setup page, allowing you to see your favourite Tabs without having to click on the extension.
The popup will ask you if you want to grant this permission every time you open it on a Salesforce Setup page (unless you click on the checkbox to prevent it from asking you again) while you have not yet granted it.
This permission is often used as a mandatory permission by other extensions because it grants access to the pages where you'd expect the extension to show up.
In the current manifest, these Salesforce Setup patterns are listed as host permissions so the extension can start up whenever your current page matches either one of these RegEx (aka any Salesforce Setup page):
https://*.my.salesforce-setup.com/*https://*.lightning.force.com/*
The optional host permission is *://*.my.salesforce.com/* and is requested with cookies so the extension can follow your Salesforce language.
This is not needed if you use Safari.
This allows the extension to save a file to your PC and is required if you want to backup your Tabs to Export them.
In order to grant the permissions, you may do so in 3 ways:
As stated before, the extension knows if it has such optional permission and will ask you to grant only the required permission needed to complete the action you requested, when you request it.
Sometimes you'll need to request the action one more time after granting the permission; other times you may simply need to update the current page. Try both and you'll be happy.
You may grant the optional permissions from the Settings page.
Look up online how to grant optional permissions based on which browser you're using.
Last Updated at: v2.2.5