|
|
This is all the available permissions that an application can require. Of this list, there are some that can only be "requested" by "System" applications. Applications that are not system applications will not be able to request permissions to "System Permissions". Only applications that are in the /system/app location and signed with the System key can request these specific system permissions.
These are the names that are used by the developer of the application to request the permission, but the name that is displayed when installing should have some similar wording to the name.
Permissions
- ACCESS_CHECKIN_PROPERTIES
- Allows read/write access to the "properties" table in the checkin database, to change values that get uploaded.
- Group: LOCATION
- Level: SYSTEM
- ACCESS_COARSE_LOCATION
- Allows an app to access approximate location derived from network location sources such as cell towers and Wi-Fi.
- Group: LOCATION
- This permission is usually used by applications that display location based ads by publishers like Admob (Google).
- ACCESS_FINE_LOCATION
- Allows an app to access precise location from location sources such as GPS, cell towers, and Wi-Fi.
- Group: LOCATION
- This permission can be used by applications that display location based ads by publishers like Admob (Google). It is also used by applications that want your exact location. Examples would be Navigation applications, "Check-In" apps like 4square.
- ACCESS_LOCATION_EXTRA_COMMANDS
- Allows an application to access extra location provider commands
- Group: LOCATION
- ACCESS_MOCK_LOCATION
- Allows an application to create mock location providers for testing
- This allows an application to fake the location information.
- Group: LOCATION
- ACCESS_NETWORK_STATE
- Allows applications to access information about networks.
- Information including what type of network the device is connected to (WiFi, 3G, LTE)
- Group: NETWORK
- This could be requested by any application that uses internet access. The application may check the state of your connection before trying to access the internet.
- ACCESS_SURFACE_FLINGER
- Allows an application to use SurfaceFlinger's low level features
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- ACCESS_WIFI_STATE
- Allows applications to access information about Wi-Fi networks
- Group: NETWORK
- This could be requested by any application that uses internet access. The application may check the state of your connection before trying to access the internet.
- ACCOUNT_MANAGER
- Allows applications to call into AccountAuthenticators. Only
the system can get this permission.
- Group: ACCOUNTS
- Level: SYSTEM
- ADD_VOICEMAIL
- Allows an application to add voicemails into the system.
- Group: PERSONAL_INFO
- AUTHENTICATE_ACCOUNTS
- Allows an application to act as an AccountAuthenticator for
the AccountManager
- Group: ACCOUNTS
- This is for applications that would authenticate you to their service.
- BATTERY_STATS
- Allows an application to collect battery statistics
- Group: SYSTEM_TOOLS
- Battery widgets and other battery information tools use this permission
- BIND_APPWIDGET
- Allows an application to tell the AppWidget service which application
can access AppWidget's data. The normal user flow is that a user
picks an AppWidget to go into a particular host, thereby giving that
host application access to the private data from the AppWidget app.
An application that has this permission should honor that contract.
Very few applications should need to use this permission.
- Group: PERSONAL_INFO
- Level: SYSTEM
- BIND_DEVICE_ADMIN
- Must be required by device administration receiver, to ensure that only the
system can interact with it.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- BIND_INPUT_METHOD
- Must be required by an InputMethodService,
to ensure that only the system can bind to it.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- BIND_REMOTEVIEWS
- Must be required by a RemoteViewsService,
to ensure that only the system can bind to it.
- Level: SYSTEM
- BIND_TEXT_SERVICE
- Must be required by a TextService (e.g. SpellCheckerService)
to ensure that only the system can bind to it.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- BIND_VPN_SERVICE
- Must be required by a Vpn Service,
to ensure that only the system can bind to it.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- BIND_WALLPAPER
- Must be required by a WallpaperService,
to ensure that only the system can bind to it.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- BLUETOOTH
- Allows applications to connect to paired bluetooth devices
- Group: NETWORK
- BLUETOOTH_ADMIN
- Allows applications to discover and pair bluetooth devices
- Group: SYSTEM_TOOLS
- BRICK
- Required to be able to disable the device
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- BROADCAST_PACKAGE_REMOVED
- Allows an application to broadcast a notification that an application
package has been removed.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- BROADCAST_SMS
- Allows an application to broadcast an SMS receipt notification
- Group: MESSAGES
- Level: SYSTEM
- BROADCAST_STICKY
- Allows an application to broadcast sticky intents. These are
broadcasts whose data is held by the system after being finished,
so that clients can quickly retrieve that data without having
to wait for the next broadcast.
- Group: SYSTEM_TOOLS
- BROADCAST_WAP_PUSH
- Allows an application to broadcast a WAP PUSH receipt notification
- Group: MESSAGES
- Level: SYSTEM
- CALL_PHONE
- Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call being placed.
- Group: COST_MONEY
- This will allow the application to "prompt" you to place a call. You will not have to enter the number, but you will have to place the "call" button. You will be able to see the number that is being called.
- CALL_PRIVILEGED
- Allows an application to call any phone number, including emergency
numbers, without going through the Dialer user interface for the user
to confirm the call being placed.
- Group: MESSAGES
- Level: SYSTEM
- CAMERA
- Required to be able to access the camera device.
- Group: HARDWARE_CONTROLS
- Any application that uses the rear or front cameras.
- CHANGE_COMPONENT_ENABLED_STATE
- Allows an application to change whether an application component (other than its own) is
enabled or not.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- CHANGE_CONFIGURATION
- Allows an application to modify the current configuration, such
as locale.
- Group: SYSTEM_TOOLS
- CHANGE_NETWORK_STATE
- Allows applications to change network connectivity state
- Group: SYSTEM_TOOLS
- CHANGE_WIFI_MULTICAST_STATE
- Allows applications to enter Wi-Fi Multicast mode
- Group: SYSTEM_TOOLS
- CHANGE_WIFI_STATE
- Allows applications to change Wi-Fi connectivity state
- Group: SYSTEM_TOOLS
- CLEAR_APP_CACHE
- Allows an application to clear the caches of all installed
applications on the device.
- Group: SYSTEM_TOOLS
- CLEAR_APP_USER_DATA
- Allows an application to clear user data
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- CONTROL_LOCATION_UPDATES
- Allows enabling/disabling location update notifications from
the radio. Not for use by normal applications.
- Group: LOCATION
- Level: SYSTEM
- DELETE_CACHE_FILES
- Allows an application to delete cache files.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- DELETE_PACKAGES
- Allows an application to delete packages.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- DEVICE_POWER
- Allows low-level access to power management
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- DIAGNOSTIC
- Allows applications to RW to diagnostic resources.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- DISABLE_KEYGUARD
- Allows applications to disable the keyguard
- Group: SYSTEM_TOOLS
- DUMP
- Allows an application to retrieve state dump information from system
services.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- EXPAND_STATUS_BAR
- Allows an application to expand or collapse the status bar.
- Group: SYSTEM_TOOLS
- FACTORY_TEST
- Run as a manufacturer test application, running as the root user.
Only available when the device is running in manufacturer test mode.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- FLASHLIGHT
- Allows access to the flashlight
- Group: HARDWARE_CONTROLS
- Allows application to control the LED flash from the camera and have it act like a flashlight.
- FORCE_BACK
- Allows an application to force a BACK operation on whatever is the
top activity.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- GET_ACCOUNTS
- Allows access to the list of accounts in the Accounts Service
- Group: ACCOUNTS
- Applications that require some type of authentication from accounts that are "connected" to the device. A list of the accounts are ususally displayed so you can choose the account to use with the application.
- GET_PACKAGE_SIZE
- Allows an application to find out the space used by any package.
- Group: SYSTEM_TOOLS
- GET_TASKS
- Allows an application to get information about the currently
or recently running tasks: a thumbnail representation of the tasks,
what activities are running in it, etc.
- Group: SYSTEM_TOOLS
- GLOBAL_SEARCH
- This permission can be used on content providers to allow the global
search system to access their data. Typically it used when the
provider has some permissions protecting it (which global search
would not be expected to hold), and added as a read-only permission
to the path in the provider where global search queries are
performed. This permission can not be held by regular applications;
it is used by applications to protect themselves from everyone else
besides global search.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- HARDWARE_TEST
- Allows access to hardware peripherals. Intended only for hardware testing
- Group: HARDWARE_CONTROLS
- INJECT_EVENTS
- Allows an application to inject user events (keys, touch, trackball)
into the event stream and deliver them to ANY window. Without this
permission, you can only deliver events to windows in your own process.
Very few applications should need to use this permission.
- Group: SYSTEM_TOOLS
- Level: SYSTEM (or APPLICATION ONLY)
- INSTALL_LOCATION_PROVIDER
- Allows an application to install a location provider into the Location Manager
- Group: LOCATION
- INSTALL_PACKAGES
- Allows an application to install packages.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- INTERNAL_SYSTEM_WINDOW
- Allows an application to open windows that are for use by parts
of the system user interface. Not for use by third party apps.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- INTERNET
- Allows applications to open network sockets.
- Group: NETWORK
- Any application that accesses the internet for any reason will have to request this permission.
- KILL_BACKGROUND_PROCESSES
- Allows an application to call
killBackgroundProcesses
- Group: SYSTEM_TOOLS
- MANAGE_ACCOUNTS
- Allows an application to manage the list of accounts in the AccountManager
- Group: ACCOUNTS
- This permission allows an application to add/remove accounts in the account manager. Like when you log in to facebook, it adds your account to the Account Manager accounts.
- MANAGE_APP_TOKENS
- Allows an application to manage (create, destroy,
Z-order) application tokens in the window manager. This is only
for use by the system.
- Group: ACCOUNTS
- Level: SYSTEM
- MANAGE_USB
- Allows an application to manage preferences and permissions for USB devices
- Group: HARDWARE_CONTROLS
- Level: SYSTEM
- MANAGE_MTP
- Allows an application to access the MTP USB kernel driver.
For use only by the device side MTP implementation.
- Group: HARDWARE_CONTROLS
- Level: SYSTEM
- MASTER_CLEAR
- MODIFY_AUDIO_SETTINGS
- Allows an application to modify global audio settings
- Group: HARDWARE_CONTROLS
- MODIFY_PHONE_STATE
- Allows modification of the telephony state - power on, mmi, etc.
Does not include placing calls.
- Group: PHONE_CALLS
- Level: System
- MOUNT_FORMAT_FILESYSTEMS
- Allows formatting file systems for removable storage
- Group: SYSTEM_TOOLS
- MOUNT_UNMOUNT_FILESYSTEMS
- Allows mounting and unmounting file systems for removable storage
- Group: SYSTEM_TOOLS
- NFC
- Allows applications to perform I/O operations over NFC
- Group: NETWORK
- PERSISTENT_ACTIVITY
- Allow an application to make its activities persistent.
deprecated
- Group: SYSTEM_TOOLS
- PROCESS_OUTGOING_CALLS
- Allows an application to monitor, modify, or abort outgoing
calls.
- Group: PHONE_CALLS
- READ_CALENDAR
- Allows an application to read the user's calendar data.
- Group: PERSONAL_INFO
- READ_CONTACTS
- Allows an application to read the user's contacts data.
- Group: PERSONAL_INFO
- READ_EXTERNAL_STORAGE
- Allows an application to read from external storage
- Group: STORAGE
- READ_FRAME_BUFFER
- Allows an application to take screen shots and more generally
get access to the frame buffer data
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- READ_HISTORY_BOOKMARKS
- Allows an application to read (but not write) the user's
browsing history and bookmarks.
- Group: PERSONAL_INFO
- READ_INPUT_STATE
- Allows an application to retrieve the current state of keys and
switches. This is only for use by the system.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- READ_LOGS
- Allows an application to read the low-level system log files.
Log entries can contain the user's private information
- Group: PERSONAL_INFO
- READ_PHONE_STATE
- Allows read only access to phone state.
- Group: PHONE_CALLS
- READ_PROFILE
- Allows an application to read the user's personal profile data.
- Group: PERSONAL_INFO
- READ_SMS
- Allows an application to read SMS messages.
- Group: MESSAGES
- READ_SOCIAL_STREAM
- Allows an application to read from the user's social stream.
- Group: PERSONAL_INFO
- READ_SYNC_SETTINGS
- Allows applications to read the sync settings
- Group: SYSTEM_TOOLS
- READ_SYNC_STATS
- Allows applications to read the sync stats
- Group: SYSTEM_TOOLS
- READ_USER_DICTIONARY
- Allows an application to read the user dictionary. This should
really only be required by an IME, or a dictionary editor like
the Settings app.
- Group: PERSONAL_INFO
- REBOOT
- Required to be able to reboot the device
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- RECEIVE_BOOT_COMPLETED
- Allows an application to receive the
ACTION_BOOT_COMPLETED that is
broadcast after the system finishes booting. If you don't
request this permission, you will not receive the broadcast at
that time. Though holding this permission does not have any
security implications, it can have a negative impact on the
user experience by increasing the amount of time it takes the
system to start and allowing applications to have themselves
running without the user being aware of them. As such, you must
explicitly declare your use of this facility to make that visible
to the user.
- Group: SYSTEM_TOOLS
- RECEIVE_EMERGENCY_BROADCAST
- Allows an application to receive emergency cell broadcast messages,
to record or display them to the user. Reserved for system apps.
- Group: MESSAGES
- Level: SYSTEM
- Pending API council approval
- RECEIVE_MMS
- Allows an application to monitor incoming MMS messages, to record
or perform processing on them.
- Group: MESSAGES
- RECEIVE_SMS
- Allows an application to monitor incoming SMS messages, to record
or perform processing on them.
- Group: MESSAGES
- RECEIVE_WAP_PUSH
- Allows an application to monitor incoming WAP push messages.
- Group: MESSAGES
- RECORD_AUDIO
- Allows an application to record audio
- Group: HARDWARE_CONTROLS
- REORDER_TASKS
- Allows an application to change the Z-order of tasks
- Group: SYSTEM_TOOLS
- RESTART_PACKAGES
deprecated - No longer supported
- SEND_SMS
- Allows an application to send SMS messages.
- Group: COST_MONEY
- SEND_SMS_NO_CONFIRMATION
- Allows an application to send SMS messages via the Messaging app with no user input or confirmation.
- Group: COST_MONEY
- Level: SYSTEM
- SET_ACTIVITY_WATCHER
- Allows an application to watch and control how activities are
started globally in the system.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- SET_ALARM
- Allows an application to broadcast an Intent to set an alarm for the
user.
- Group: PERSONAL_INFO
- SET_ALWAYS_FINISH
- Allows an application to control whether activities are immediately
finished when put in the background.
- Group: DEVELOPMENT_TOOLS
- SET_ANIMATION_SCALE
- Modify the global animation scaling factor.
- Group: SYSTEM_TOOLS
- SET_DEBUG_APP
- Configure an application for debugging.
- Group: DEVELOPMENT_TOOLS
- SET_ORIENTATION
- Allows low-level access to setting the orientation (actually
rotation) of the screen. Not for use by normal applications.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- SET_POINTER_SPEED
- Allows low-level access to setting the pointer speed.
Not for use by normal applications.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- SET_PREFERRED_APPLICATIONS
deprecated No longer useful- Group: SYSTEM_TOOLS
- SET_PROCESS_LIMIT
- Allows an application to set the maximum number of (not needed)
application processes that can be running.
- Group: DEVELOPMENT_TOOLS
- SET_TIME
- Allows applications to set the system time
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- SET_TIME_ZONE
- Allows applications to set the system time zone
- Group: SYSTEM_TOOLS
- SET_WALLPAPER
- Allows applications to set the wallpaper
- Group: SYSTEM_TOOLS
- SET_WALLPAPER_HINTS
- Allows applications to set the wallpaper hints
- Group: SYSTEM_TOOLS
- SIGNAL_PERSISTENT_PROCESSES
- Allow an application to request that a signal be sent to all persistent processes
- Group: DEVELOPMENT_TOOLS
- STATUS_BAR
- Allows an application to open, close, or disable the status bar
and its icons.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- SUBSCRIBED_FEEDS_READ
- Allows an application to read the subscribed feeds
ContentProvider.
- Group: SYSTEM_TOOLS
- SUBSCRIBED_FEEDS_WRITE
- Allows an application to write to the subscribed feeds
ContentProvider.
- Group: SYSTEM_TOOLS
- SYSTEM_ALERT_WINDOW
- Allows an application to open windows using the type
TYPE_SYSTEM_ALERT,
shown on top of all other applications. Very few applications
should use this permission; these windows are intended for
system-level interaction with the user.
- Group: SYSTEM_TOOLS
- UPDATE_DEVICE_STATS
- Allows an application to update device statistics. Not for
use by third party apps.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- USE_CREDENTIALS
- Allows an application to request authtokens from the AccountManager
- Group: ACCOUNTS
- USE_SIP
- Allows an application to use SIP service
- Group: NETWORK
- VIBRATE
- Allows access to the vibrator
- Group: HARDWARE_CONTROLS
- WAKE_LOCK
- Allows using PowerManager WakeLocks to keep processor from sleeping or screen
from dimming
- Group: SYSTEM_TOOLS
- WRITE_APN_SETTINGS
- Allows applications to write the apn settings
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- WRITE_CALENDAR
- Allows an application to write (but not read) the user's
calendar data.
- Group: PERSONAL_INFO
- WRITE_CONTACTS
- Allows an application to write (but not read) the user's
contacts data.
- Group: PERSONAL_INFO
- WRITE_EXTERNAL_STORAGE
- Allows an application to write to external storage
- Group: STORAGE
- WRITE_GSERVICES
- Allows an application to modify the Google service map.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- WRITE_HISTORY_BOOKMARKS
- Allows an application to write (but not read) the user's
browsing history and bookmarks.
- Group: PERSONAL_INFO
- WRITE_PROFILE
- Allows an application to write (but not read) the user's
personal profile data.
- Group: PERSONAL_INFO
- WRITE_SECURE_SETTINGS
- Allows an application to read or write the secure system settings.
- Group: SYSTEM_TOOLS
- Level: SYSTEM
- WRITE_SETTINGS
- Allows an application to read or write the system settings.
- Group: SYSTEM_TOOLS
- WRITE_SMS
- Allows an application to write SMS messages.
- Group: MESSAGES
- WRITE_SOCIAL_STREAM
- Allows an application to write (but not read) the user's
social stream data.
- Group: PERSONAL_INFO
- WRITE_SYNC_SETTINGS
- Allows applications to write the sync settings
- Group: SYSTEM_TOOLS
- WRITE_USER_DICTIONARY
- Allows an application to write to the user dictionary.
- Group: PERSONAL_INFO
Groups
The individual permissions above fall in to one (or more) of the following permission groups:
- ACCOUNTS
- Permissions for direct access to the accounts managed
by the Account Manager.
- AFFECTS_BATTERY
- APP_INFO
- AUDIO_SETTINGS
- BLUETOOTH_NETWORK
- BOOKMARKS
- CALENDAR
- CAMERA
- COST_MONEY
- Used for permissions that can be used to make the user spend without their direct involvement. For example, this is the group for permissions that allow you to directly place phone calls, directly send SMS messages, etc.
- DEVELOPMENT_TOOLS
- Group of permissions that are related to development features. These
are not permissions that should appear in normal applications; they
protect APIs that are intended only to be used for development
purposes.
- DEVICE_ALARMS
- DISPLAY
- HARDWARE_CONTROLS
- Used for permissions that provide direct access to the hardware on
the device. This includes audio, the camera, vibrator, etc.
- LOCATION
- Used for permissions that allow access to the user's current
location.
- MESSAGES
- Used for permissions that allow an application to send messages
on behalf of the user or intercept messages being received by the
user. This is primarily intended for SMS/MMS messaging, such as
receiving or reading an MMS.
- MICROPHONE
- NETWORK
- Used for permissions that provide access to networking services. The
main permission here is internet access, but this is also an
appropriate group for accessing or modifying any network configuration
or other related network operations.
- PERSONAL_INFO
- Used for permissions that provide access to the user's private data,
such as contacts, calendar events, e-mail messages, etc. This includes
both reading and writing of this data (which should generally be
expressed as two distinct permissions).
- PHONE_CALLS
- Used for permissions that are associated with accessing and modifyign
telephony state: intercepting outgoing calls, reading
and modifying the phone state. Note that
placing phone calls is not in this group, since that is in the
more important "takin' yer moneys" group.
- SCREENLOCK
- SOCIAL_INFO
- STATUS_BAR
- STORAGE
- Group of permissions that are related to SD card access.
- SYNC_SETTINGS
- SYSTEM_CLOCK
- SYSTEM_TOOLS
- Group of permissions that are related to system APIs. Many
of these are not permissions the user will be expected to understand,
and such permissions should generally be marked as "normal" protection
level so they don't get displayed. This can also, however, be used
for miscellaneous features that provide access to the operating system,
such as writing the global system settings.
- USER_DICTIONARY
- VOICEMAIL
- WALLPAPER
- WRITE_USER_DICTIONARY
|
android application permissions. Second link. – ArtemStorozhuk Jan 25 at 20:56