Vor Kurzem aufgerufene Suchen


Keine vor kurzem aufgerufene Suchen

Tracking agent time spent outside of Zendesk - Data Scope Questions



Gepostet 18. Feb. 2025

The extension requires the permission scope of <all_urls> which would allow the extension to grab any data from any website the user is browsing.

 

Is there a way to narrow the scope or documentation that can be shared with security folks of what data exactly is recorded?

 

 


0

2

2 Kommentare

Adding Teddy to the ticket a the response will be relevant to him.

0


Hi Monica! Sorry for taking so long to address your question. Let me jump right in and address your questions:

 

Your point about the scope for all_urls is correct - what the extension does with this permission is essentially read the URL that the user is currently on. However, what it does with that read action is then see if it matches the rules list of configured URLs that you set up in the WFM app. If there's no match, we do nothing with it - if there's a match with a General task in that mapping, then we dispatch an even stating that Agent X has started counting time on Task Y. We do not send or store the URLs themselves, only the General task that they are associated with.

 

Here's a rundown of all permissions that the extension uses and what it uses them for:

 

  • tabs: we need Tabs information to know the URL on each tab, and also which tab is currently active/in focus.
  • cookies: We need cookies because we wanted to avoid users having to sign in separately to our main app: (Zendesk WFM) and then do it again for the extension. Instead we are relying on the cookies API to get the existing ones for the main app and use it inside the extension as well.
  • storage: Storage is used for all the data that is fetched from our application backend (such as the mapping between web addresses and General tasks) as well as storing the session cookie and current activity.
  • host permissions (“<all_urls>“): Access to all urls is needed so that the extension can use it to apply the mapping logic and track the user activity.

Does this help address your question around this subject? Let me know if it didn't and I'll be happy to continue working on it with you.

Thanks!

0


Bitte melden Sie sich an, um einen Kommentar zu hinterlassen.

Sie finden nicht, wonach Sie suchen?

Neuer Post