On Fri, Jun 25, 2010 at 2:47 PM, Peter Eastman <[email protected]> wrote:
> I'd like to see more permissions handled implicitly through user
> actions at runtime.
For some fraction of permissions, this makes sense. The fraction is
very very small.
> For
> example, it's fine for a program to send an SMS message as long as
> it's done through a standard UI that displays the message and requires
> the user to click the "Send" button. That shouldn't require any
> special permissions, and it also should be enough to meet the needs of
> most programs. Permission would only be required to send SMS without
> using the standard UI, and that would be an uncommon thing to ask
> for. That way, it would actually get people's attention if a program
> asked for that permission.
This is already implemented. It is also implemented for placing phone calls.
What the core Android team is trying to avoid is a Vista-like
experience ("the CPU would like to execute an instruction -- allow or
deny?").
> No security model can stop all malware, and I think Android does a lot
> better than most OS's, but there's room for improvement. Having a
> program ask you for special permissions should be the exception, not
> the rule.
Assuming the SMobile Systems survey is accurate, here are the top 5
permissions requested:
INTERNET
ACCESS_COARSE_LOCATION
WRITE_EXTERNAL_STORAGE
ACCESS_FINE_LOCATION
READ_CONTACTS
None of these have an obvious "user action" that fits your proposed model, IMHO.
There are certainly ways to improve the user's ability to grok and
appreciate the permissions screen. However, it is unrealistic to
expect that applications will just stop requesting permissions.
--
Mark Murphy (a Commons Guy)
http://commonsware.com | http://github.com/commonsguy
http://commonsware.com/blog | http://twitter.com/commonsguy
_The Busy Coder's Guide to *Advanced* Android Development_ Version 1.6
Available!
--
You received this message because you are subscribed to the Google Groups
"Android Discuss" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/android-discuss?hl=en.
