Android权限分类及保护级别

2023-12-05 18:47:52

Android权限分类及保护级别

 

1、正常类（属于安装时）--------下表中自己查询后标记：灰白色背景--------防护等级：正常normal（防护等级：又称保护级别），见https://developer.android.com/guide/topics/permissions/overview#install-time，只需在AndroidManifest.xml中显式的声明（或在IDE中勾选），它不会在运行时被自动拉起或被你的代码动态拉起。

2、特殊类（属于安装时）--------下表中自己查询后标记：紫色背景--------防护等级：签名signature（防护等级：又称保护级别），它会被你的代码动态拉起。其下包含子等级签名|特权|开发，|特权|开发：只有平台和原始设备制造商 (OEM) 可以定义特殊权限。此外，如果平台和 OEM 想要防止有人执行功能特别强大的操作（例如通过其他应用绘图），通常会定义特殊权限--------防护等级：应用操作appop。

3、运行时类（又称“危险类”，属于运行时）-------下表中自己查询后标记：-黄色背景--------防护等级：危险dangerous（防护等级：又称保护级别），必须在AndroidManifest.xml中显式的声明，并在App中需要使用的代码位置动态调用权限申请。App在首次安装或运行时，这些权限会被自动拉起，之后必须在需要的时机被代码再次动态调用以让机主确认。见https://developer.android.com/training/permissions/requesting

上述是关键，下面这个清单，你具体查询https://developer.android.com/reference/android/Manifest.permission中描述的关于防护等级的具体阐述后，根据自己的需要做标记后使用：

 

Constants权限常量

String ACCEPT_HANDOVER

Allows a calling app to continue a call which was started in another app.
String ACCESS_BACKGROUND_LOCATION

Allows an app to access location in the background.
String ACCESS_CHECKIN_PROPERTIES

Allows read/write access to the "properties" table in the checkin database, to change values that get uploaded.
String ACCESS_COARSE_LOCATION

Allows an app to access approximate location.
String ACCESS_FINE_LOCATION

Allows an app to access precise location.
String ACCESS_LOCATION_EXTRA_COMMANDS

Allows an application to access extra location provider commands.
String ACCESS_MEDIA_LOCATION

Allows an application to access any geographic locations persisted in the user's shared collection.允许应用访问用户共享集合中保留的任何地理位置。
在API级别29中添加，防护等级：危险，常数值：“ android.permission.ACCESS_MEDIA_LOCATION”
String ACCESS_NETWORK_STATE

Allows applications to access information about networks.允许应用程序访问有关网络的信息。

在API级别1中添加，防护等级：正常，常数值：“ android.permission.ACCESS_NETWORK_STATE”
String ACCESS_NOTIFICATION_POLICY

Marker permission for applications that wish to access notification policy.
String ACCESS_WIFI_STATE

Allows applications to access information about Wi-Fi networks.
String ACCOUNT_MANAGER

Allows applications to call into AccountAuthenticators.
String ACTIVITY_RECOGNITION

Allows an application to recognize physical activity.
String ADD_VOICEMAIL

Allows an application to add voicemails into the system.
String ANSWER_PHONE_CALLS

Allows the app to answer an incoming phone call.
String BATTERY_STATS

Allows an application to collect battery statistics

Protection level: signature|privileged|development
String BIND_ACCESSIBILITY_SERVICE

Must be required by an AccessibilityService, to ensure that only the system can bind to it.必须带有AccessibilityService，以确保只有系统可以绑定到它。

在API级别16中添加，防护等级：签名
String BIND_APPWIDGET

Allows an application to tell the AppWidget service which application can access AppWidget's data.
String BIND_AUTOFILL_SERVICE

Must be required by a AutofillService, to ensure that only the system can bind to it.
String BIND_CALL_REDIRECTION_SERVICE

Must be required by a CallRedirectionService, to ensure that only the system can bind to it.
String BIND_CARRIER_MESSAGING_CLIENT_SERVICE

A subclass of CarrierMessagingClientService must be protected with this permission.
String BIND_CARRIER_MESSAGING_SERVICE

This constant was deprecated in API level 23. Use BIND_CARRIER_SERVICES instead
String BIND_CARRIER_SERVICES

The system process that is allowed to bind to services in carrier apps will have this permission.
String BIND_CHOOSER_TARGET_SERVICE

This constant was deprecated in API level 30. For publishing direct share targets, please follow the instructions in https://developer.android.com/training/sharing/receive.html#providing-direct-share-targets instead.
String BIND_COMPANION_DEVICE_SERVICE

Must be required by any CompanionDeviceServices to ensure that only the system can bind to it.
String BIND_CONDITION_PROVIDER_SERVICE

Must be required by a ConditionProviderService, to ensure that only the system can bind to it.
String BIND_CONTROLS

Allows SystemUI to request third party controls.
String BIND_DEVICE_ADMIN

Must be required by device administration receiver, to ensure that only the system can interact with it.
String BIND_DREAM_SERVICE

Must be required by an DreamService, to ensure that only the system can bind to it.
String BIND_INCALL_SERVICE

Must be required by a InCallService, to ensure that only the system can bind to it.
String BIND_INPUT_METHOD

Must be required by an InputMethodService, to ensure that only the system can bind to it.
String BIND_MIDI_DEVICE_SERVICE

Must be required by an MidiDeviceService, to ensure that only the system can bind to it.
String BIND_NFC_SERVICE

Must be required by a HostApduService or OffHostApduService to ensure that only the system can bind to it.
String BIND_NOTIFICATION_LISTENER_SERVICE

Must be required by an NotificationListenerService, to ensure that only the system can bind to it.
String BIND_PRINT_SERVICE

Must be required by a PrintService, to ensure that only the system can bind to it.
String BIND_QUICK_ACCESS_WALLET_SERVICE

Must be required by a QuickAccessWalletService to ensure that only the system can bind to it.
String BIND_QUICK_SETTINGS_TILE

Allows an application to bind to third party quick settings tiles.
String BIND_REMOTEVIEWS

Must be required by a RemoteViewsService, to ensure that only the system can bind to it.
String BIND_SCREENING_SERVICE

Must be required by a CallScreeningService, to ensure that only the system can bind to it.
String BIND_TELECOM_CONNECTION_SERVICE

Must be required by a ConnectionService, to ensure that only the system can bind to it.
String BIND_TEXT_SERVICE

Must be required by a TextService (e.g. SpellCheckerService) to ensure that only the system can bind to it.
String BIND_TV_INPUT

Must be required by a TvInputService to ensure that only the system can bind to it.
String BIND_VISUAL_VOICEMAIL_SERVICE

Must be required by a link VisualVoicemailService to ensure that only the system can bind to it.
String BIND_VOICE_INTERACTION

Must be required by a VoiceInteractionService, to ensure that only the system can bind to it.
String BIND_VPN_SERVICE

Must be required by a VpnService, to ensure that only the system can bind to it.
String BIND_VR_LISTENER_SERVICE

Must be required by an VrListenerService, to ensure that only the system can bind to it.
String BIND_WALLPAPER

Must be required by a WallpaperService, to ensure that only the system can bind to it.
String BLUETOOTH

Allows applications to connect to paired bluetooth devices.
String BLUETOOTH_ADMIN

Allows applications to discover and pair bluetooth devices.
String BLUETOOTH_CONNECT

Required to be able to connect to paired Bluetooth devices.
String BLUETOOTH_PRIVILEGED

Allows applications to pair bluetooth devices without user interaction, and to allow or disallow phonebook access or message access.
String BLUETOOTH_SCAN

Required to be able to discover and pair nearby Bluetooth devices.
String BODY_SENSORS

Allows an application to access data from sensors that the user uses to measure what is happening inside their body, such as heart rate.
String BROADCAST_PACKAGE_REMOVED

Allows an application to broadcast a notification that an application package has been removed.
String BROADCAST_SMS

Allows an application to broadcast an SMS receipt notification.
String BROADCAST_STICKY

Allows an application to broadcast sticky intents.
String BROADCAST_WAP_PUSH

Allows an application to broadcast a WAP PUSH receipt notification.
String CALL_COMPANION_APP

Allows an app which implements the InCallService API to be eligible to be enabled as a calling companion app.
String CALL_PHONE

Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.
String CALL_PRIVILEGED

Allows an application to call any phone number, including emergency numbers, without going through the Dialer user interface for the user to confirm the call being placed.
String CAMERA

Required to be able to access the camera device.
String CAPTURE_AUDIO_OUTPUT

Allows an application to capture audio output.
String CHANGE_COMPONENT_ENABLED_STATE

Allows an application to change whether an application component (other than its own) is enabled or not.
String CHANGE_CONFIGURATION

Allows an application to modify the current configuration, such as locale.
String CHANGE_NETWORK_STATE

Allows applications to change network connectivity state.
String CHANGE_WIFI_MULTICAST_STATE

Allows applications to enter Wi-Fi Multicast mode.
String CHANGE_WIFI_STATE

Allows applications to change Wi-Fi connectivity state.
String CLEAR_APP_CACHE

Allows an application to clear the caches of all installed applications on the device.
String CONTROL_LOCATION_UPDATES

Allows enabling/disabling location update notifications from the radio.
String DELETE_CACHE_FILES

Old permission for deleting an app's cache files, no longer used, but signals for us to quietly ignore calls instead of throwing an exception.
String DELETE_PACKAGES

Allows an application to delete packages.
String DIAGNOSTIC

Allows applications to RW to diagnostic resources.
String DISABLE_KEYGUARD

Allows applications to disable the keyguard if it is not secure.
String DUMP

Allows an application to retrieve state dump information from system services.
String EXPAND_STATUS_BAR

Allows an application to expand or collapse the status bar.
String FACTORY_TEST

Run as a manufacturer test application, running as the root user.
String FOREGROUND_SERVICE

Allows a regular application to use Service.startForeground.
String GET_ACCOUNTS

Allows access to the list of accounts in the Accounts Service.
String GET_ACCOUNTS_PRIVILEGED

Allows access to the list of accounts in the Accounts Service.
String GET_PACKAGE_SIZE

Allows an application to find out the space used by any package.
String GET_TASKS

This constant was deprecated in API level 21. No longer enforced.
String GLOBAL_SEARCH

This permission can be used on content providers to allow the global search system to access their data.
String HIDE_OVERLAY_WINDOWS

Allows an app to prevent non-system-overlay windows from being drawn on top of it
String HIGH_SAMPLING_RATE_SENSORS

Allows an app to access sensor data with a sampling rate greater than 200 Hz.
String INSTALL_LOCATION_PROVIDER

Allows an application to install a location provider into the Location Manager.
String INSTALL_PACKAGES

Allows an application to install packages.
String INSTALL_SHORTCUT

Allows an application to install a shortcut in Launcher.
String INSTANT_APP_FOREGROUND_SERVICE

Allows an instant app to create foreground services.
String INTERACT_ACROSS_PROFILES

Allows interaction across profiles in the same profile group.
String INTERNET

Allows applications to open network sockets.
String KILL_BACKGROUND_PROCESSES

Allows an application to call ActivityManager.killBackgroundProcesses(String).
String LOADER_USAGE_STATS

Allows a data loader to read a package's access logs.
String LOCATION_HARDWARE

Allows an application to use location features in hardware, such as the geofencing api.
String MANAGE_DOCUMENTS

Allows an application to manage access to documents, usually as part of a document picker.
String MANAGE_EXTERNAL_STORAGE

Allows an application a broad access to external storage in scoped storage.
String MANAGE_MEDIA

Allows an application to modify and delete media files on this device or any connected storage device without user confirmation.
String MANAGE_ONGOING_CALLS

Allows to query ongoing call details and manage ongoing calls

Protection level: signature|appop
String MANAGE_OWN_CALLS

Allows a calling application which manages its own calls through the self-managed ConnectionService APIs.
String MASTER_CLEAR

Not for use by third-party applications.
String MEDIA_CONTENT_CONTROL

Allows an application to know what content is playing and control its playback.
String MODIFY_AUDIO_SETTINGS

Allows an application to modify global audio settings.
String MODIFY_PHONE_STATE

Allows modification of the telephony state - power on, mmi, etc.
String MOUNT_FORMAT_FILESYSTEMS

Allows formatting file systems for removable storage.
String MOUNT_UNMOUNT_FILESYSTEMS

Allows mounting and unmounting file systems for removable storage.
String NFC

Allows applications to perform I/O operations over NFC.
String NFC_PREFERRED_PAYMENT_INFO

Allows applications to receive NFC preferred payment service information.
String NFC_TRANSACTION_EVENT

Allows applications to receive NFC transaction events.
String PACKAGE_USAGE_STATS

Allows an application to collect component usage statistics

Declaring the permission implies intention to use the API and the user of the device can grant permission through the Settings application.
String PERSISTENT_ACTIVITY

This constant was deprecated in API level 15. This functionality will be removed in the future; please do not use. Allow an application to make its activities persistent.
String PROCESS_OUTGOING_CALLS

This constant was deprecated in API level 29. Applications should use CallRedirectionService instead of the Intent.ACTION_NEW_OUTGOING_CALL broadcast.
String QUERY_ALL_PACKAGES

Allows query of any normal app on the device, regardless of manifest declarations.
String READ_CALENDAR

Allows an application to read the user's calendar data.
String READ_CALL_LOG

Allows an application to read the user's call log.
String READ_CONTACTS

Allows an application to read the user's contacts data.
String READ_EXTERNAL_STORAGE

Allows an application to read from external storage.允许应用程序从外部存储读取。声明了WRITE_EXTERNAL_STORAGE权限的任何应用都将会被隐式授予此权限。

在API级别16中，防护等级：危险，常数值：“ android.permission.READ_EXTERNAL_STORAGE”
String READ_INPUT_STATE

This constant was deprecated in API level 16. The API that used this permission has been removed.
String READ_LOGS

Allows an application to read the low-level system log files.
String READ_PHONE_NUMBERS

Allows read access to the device's phone number(s).
String READ_PHONE_STATE

Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.
String READ_PRECISE_PHONE_STATE

Allows read only access to precise phone state.
String READ_SMS

Allows an application to read SMS messages.
String READ_SYNC_SETTINGS

Allows applications to read the sync settings.
String READ_SYNC_STATS

Allows applications to read the sync stats.
String READ_VOICEMAIL

Allows an application to read voicemails in the system.
String REBOOT

Required to be able to reboot the device.
String RECEIVE_BOOT_COMPLETED

Allows an application to receive the Intent.ACTION_BOOT_COMPLETED that is broadcast after the system finishes booting.
String RECEIVE_MMS

Allows an application to monitor incoming MMS messages.
String RECEIVE_SMS

Allows an application to receive SMS messages.
String RECEIVE_WAP_PUSH

Allows an application to receive WAP push messages.
String RECORD_AUDIO

Allows an application to record audio.
String REORDER_TASKS

Allows an application to change the Z-order of tasks.
String REQUEST_COMPANION_PROFILE_WATCH

Allows app to request to be associated with a device via CompanionDeviceManager as a "watch"

Protection level: normal
String REQUEST_COMPANION_RUN_IN_BACKGROUND

Allows a companion app to run in the background.
String REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

Allows a companion app to use data in the background.
String REQUEST_DELETE_PACKAGES

Allows an application to request deleting packages.
String REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Permission an application must hold in order to use Settings.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS.
String REQUEST_INSTALL_PACKAGES

Allows an application to request installing packages.
String REQUEST_OBSERVE_COMPANION_DEVICE_PRESENCE

Allows an application to subscribe to notifications about the presence status change of their associated companion device
String REQUEST_PASSWORD_COMPLEXITY

Allows an application to request the screen lock complexity and prompt users to update the screen lock to a certain complexity level.
String RESTART_PACKAGES

This constant was deprecated in API level 15. The ActivityManager.restartPackage(String) API is no longer supported.
String SCHEDULE_EXACT_ALARM

Allows an app to use exact alarm scheduling APIs to perform timing sensitive background work.
String SEND_RESPOND_VIA_MESSAGE

Allows an application (Phone) to send a request to other applications to handle the respond-via-message action during incoming calls.
String SEND_SMS

Allows an application to send SMS messages.
String SET_ALARM

Allows an application to broadcast an Intent to set an alarm for the user.
String SET_ALWAYS_FINISH

Allows an application to control whether activities are immediately finished when put in the background.
String SET_ANIMATION_SCALE

Modify the global animation scaling factor.
String SET_DEBUG_APP

Configure an application for debugging.
String SET_PREFERRED_APPLICATIONS

This constant was deprecated in API level 15. No longer useful, see PackageManager.addPackageToPreferred(String) for details.
String SET_PROCESS_LIMIT

Allows an application to set the maximum number of (not needed) application processes that can be running.
String SET_TIME

Allows applications to set the system time directly.
String SET_TIME_ZONE

Allows applications to set the system time zone directly.
String SET_WALLPAPER

Allows applications to set the wallpaper.
String SET_WALLPAPER_HINTS

Allows applications to set the wallpaper hints.
String SIGNAL_PERSISTENT_PROCESSES

Allow an application to request that a signal be sent to all persistent processes.
String SMS_FINANCIAL_TRANSACTIONS

This constant was deprecated in API level S. The API that used this permission is no longer functional.
String START_FOREGROUND_SERVICES_FROM_BACKGROUND

Allows an application to start foreground services from background, can only be granted to privileged apps or app that is SMS/EMERGENCY/SYSTEM GALLERY roles.
String START_VIEW_PERMISSION_USAGE

Allows the holder to start the permission usage screen for an app.
String STATUS_BAR

Allows an application to open, close, or disable the status bar and its icons.
String SYSTEM_ALERT_WINDOW

Allows an app to create windows using the type WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.
String TRANSMIT_IR

Allows using the device's IR transmitter, if available.
String UNINSTALL_SHORTCUT

 

Don't use this permission in your app.
String UPDATE_DEVICE_STATS

Allows an application to update device statistics.
String USE_BIOMETRIC

Allows an app to use device supported biometric modalities.
String USE_FINGERPRINT

This constant was deprecated in API level 28. Applications should request USE_BIOMETRIC instead
String USE_FULL_SCREEN_INTENT

Required for apps targeting Build.VERSION_CODES.Q that want to use notification full screen intents.
String USE_ICC_AUTH_WITH_DEVICE_IDENTIFIER

Allows to read device identifiers and use ICC based authentication like EAP-AKA.
String USE_SIP

Allows an application to use SIP service.
String VIBRATE

Allows access to the vibrator.
String WAKE_LOCK

Allows using PowerManager WakeLocks to keep processor from sleeping or screen from dimming.
String WRITE_APN_SETTINGS

Allows applications to write the apn settings and read sensitive fields of an existing apn settings like user and password.
String WRITE_CALENDAR

Allows an application to write the user's calendar data.
String WRITE_CALL_LOG

Allows an application to write (but not read) the user's call log data.
String WRITE_CONTACTS

Allows an application to write the user's contacts data.
String WRITE_EXTERNAL_STORAGE

Allows an application to write to external storage.允许应用程序写入外部存储。声明该权限的任何应用都将隐式授予android.permission.READ_EXTERNAL_STORAGE从外部存储读取的权限。

在API级别4中添加，防护等级：危险，常数值：“ android.permission.WRITE_EXTERNAL_STORAGE”
String WRITE_GSERVICES

Allows an application to modify the Google service map.
String WRITE_SECURE_SETTINGS

Allows an application to read or write the secure system settings.
String WRITE_SETTINGS

Allows an application to read or write the system settings.
String WRITE_SYNC_SETTINGS

Allows applications to write the sync settings.
String WRITE_VOICEMAIL

Allows an application to modify and remove existing voicemails in the system.

 

 

 

 

上一篇：成功解决Both binary classification-only and multiclassification-only loss function or metrics specified


下一篇：MySQL 的read_only 只读属性说明 (运维笔记)