[gnome-documents] flatpaks: add --filesystem=host:ro

[Christopher Davis <christopherdavis src gnome org>]

commit 7efd01c33147654fc16bde779414ff5977f2ccc8
Author: Christopher Davis <brainblasted disroot org>
Date:   Tue Jan 22 02:04:52 2019 -0500

    flatpaks: add --filesystem=host:ro
    
    The flatpaks of Books and Documents could see files outside of the xdg-dirs defined in the manifests. 
This resulted in those Documents showing up in the interface and leading to a "file does not exist" message 
or a blank document for Documents and Books respectively.
    
    Because of this, instead of treating it like they can only see out of the xdg-dirs I'm opting to allow 
them read-only permissions on the host system.

 flatpak/org.gnome.Books.json     | 3 ++-
 flatpak/org.gnome.Documents.json | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)
---
diff --git a/flatpak/org.gnome.Books.json b/flatpak/org.gnome.Books.json
index ab90c860..70f2972f 100644
--- a/flatpak/org.gnome.Books.json
+++ b/flatpak/org.gnome.Books.json
@@ -12,7 +12,8 @@
         /* Wayland access */
         "--socket=wayland",
         /* Read-only access to users documents */
-        "--filesystem=xdg-documents:ro", "--filesystem=xdg-download:ro",
+        /* Books can be outside xdg-dirs */
+        "--filesystem=host:ro",
         /* Needs to talk to the network: */
         "--share=network",
         /* Tracker access */
diff --git a/flatpak/org.gnome.Documents.json b/flatpak/org.gnome.Documents.json
index 25234e34..b6e88f3f 100644
--- a/flatpak/org.gnome.Documents.json
+++ b/flatpak/org.gnome.Documents.json
@@ -12,7 +12,8 @@
         /* Wayland access */
         "--socket=wayland",
         /* Read-only access to users documents */
-        "--filesystem=xdg-documents:ro", "--filesystem=xdg-download:ro",
+        /* Docs can be outside xdg-dirs */
+        "--filesystem=host:ro",
         /* Needs to talk to the network: */
         "--share=network",
         /* Tracker access */