To many permissions being asked, can ́t turn them off.

  • 1
  • Question
  • Updated 5 years ago
  • Answered
After the build, my app is requesting a lot of permissions I do not need (se end of email for that is needed). It is requesting write access to sd card, account management and this king of stuff, so my app is being marked as potencially mallicious.

Does phonegap manages permissions considering the manifest or only config.xml?
What else phonegap takes into consideration to manage the permissions?

Searching a lot of foruns and documentation, I already tried to use the statment below at config.xml, without success.

Any help? I could send my manifest and config here. Thks in advance, Alex.

ps. Need only:
INTERNET
ACCESS_FINE_LOCATION
ACCESS_COARSE_LOCATION
ACCESS_NETWORK_STATE
Photo of Alexandre Leite

Alexandre Leite

  • 4 Posts
  • 0 Reply Likes

Posted 5 years ago

  • 1
Photo of JesseMonroy650 (Volunteer)

JesseMonroy650 (Volunteer), Champion

  • 3325 Posts
  • 122 Reply Likes
@Alexandre, I have similar problems. You'll see I just released 10+ demo Apps. some have the permission requirements. I did NOT ask for them in my AndroidManifest.xml nor did i ask in my config.xml. I think this is a bug. I can see about asking for INTERNET and ACCESS_NETWORK_STATE, the LOCATION is not needed.

To be clear, in my Demo Apps are asking for similar, and I did not specify that I needed them.
Photo of Petra V.

Petra V., Champion

  • 7794 Posts
  • 1391 Reply Likes
PGB does NOT add additional permissions, except INTERNET. I just tested it with several apps.

If PGB does so in the forementioned demo apps, two possible causes could be:
- PGB3.5.0 specified, instead of the current PGB3.7.0, and
- AndroidManifest.xml included in the package. PGB will generate one, so this file should not be in the package.
Photo of JesseMonroy650 (Volunteer)

JesseMonroy650 (Volunteer), Champion

  • 3325 Posts
  • 122 Reply Likes
@Petra V.
The second point, AndroidManifest.xml, makes sense.
Are you stating that specifiy in PGB3.5.0 will create some extra plugins?
That seems silly. --Jesse
Photo of Petra V.

Petra V., Champion

  • 7794 Posts
  • 1391 Reply Likes
No, I am not stating that. This thread is about permissions, not about sudden unwanted plugins.

Specifying PGB3.5.0 is bad for multiple reasons.
Since 3.5.0, many other things changed, like whitelisting. Because these changes are not always backwards compatible, problems may arise. Also, PGB3.5.0 still has the Android security issues that were fixed in PGB3.6.3
Find changes for PGB3.7.0 here: http://phonegap.com/blog/2015/02/17/p...