Android权限分类及保护级别

Allows a calling app to continue a call which was started in another app.

Allows an app to access location in the background.

Allows read/write access to the "propertIEs" table in the checkin database, to change values that get uploaded.

Allows an app to access approximate location.

Allows an app to access precise location.

Allows an application to access extra location provIDer commands.

Allows an application to access any geographic locations persisted in the user's shared collection.允许应用访问用户共享集合中保留的任何地理位置。
在API级别29中添加，防护等级：危险，常数值：“ androID.permission.ACCESS_MEDIA_LOCATION”

Allows applications to access information about networks.允许应用程序访问有关网络的信息。

在API级别1中添加，防护等级：正常，常数值：“ androID.permission.ACCESS_NETWORK_STATE”

Marker permission for applications that wish to access notification policy.

Allows applications to access information about Wi-Fi networks.

Allows applications to call into AccountAuthenticators.

Allows an application to recognize physical activity.

Allows an application to add voicemails into the system.

Allows the app to answer an incoming phone call.

Allows an application to collect battery statistics

Protection level: signature|privileged|development

Must be required by an AccessibilityService, to ensure that only the system can bind to it.必须带有AccessibilityService，以确保只有系统可以绑定到它。

在API级别16中添加，防护等级：签名

Allows an application to tell the App@R_403_5537@ service which application can access App@R_403_5537@'s data.

Must be required by a AutofillService, to ensure that only the system can bind to it.

Must be required by a @L_502_47@, to ensure that only the system can bind to it.

A subclass of CarrierMessagingClientService must be protected with this permission.

This constant was deprecated in API level 23. Use BIND_CARRIER_SERVICES instead

The system process that is allowed to bind to services in carrIEr apps will have this permission.

This constant was deprecated in API level 30. For publishing direct share targets, please follow the instructions in https://developer.androID.com/training/sharing/receive.HTML#provIDing-direct-share-targets instead.

Must be required by any CompanionDeviceServices to ensure that only the system can bind to it.

Must be required by a ConditionProviderService, to ensure that only the system can bind to it.

Allows systemUI to request third party controls.

Must be required by device administration receiver, to ensure that only the system can interact with it.

Must be required by an DreamService, to ensure that only the system can bind to it.

Must be required by a InCallService, to ensure that only the system can bind to it.

Must be required by an InputMethodService, to ensure that only the system can bind to it.

Must be required by an MidiDeviceService, to ensure that only the system can bind to it.

Must be required by a HostApduService or OffHostApduService to ensure that only the system can bind to it.

Must be required by an NotificationListenerService, to ensure that only the system can bind to it.

Must be required by a PrintService, to ensure that only the system can bind to it.

Must be required by a QuickAccessWalletService to ensure that only the system can bind to it.

Allows an application to bind to third party quick settings tiles.

Must be required by a RemoteViewsService, to ensure that only the system can bind to it.

Must be required by a CallScreeningService, to ensure that only the system can bind to it.

Must be required by a ConnectionService, to ensure that only the system can bind to it.

Must be required by a TextService (e.g. SpellCheckerService) to ensure that only the system can bind to it.

Must be required by a TvInputService to ensure that only the system can bind to it.

Must be required by a link VisualVoicemailService to ensure that only the system can bind to it.

Must be required by a VoiceInteractionService, to ensure that only the system can bind to it.

Must be required by a VpnService, to ensure that only the system can bind to it.

Must be required by an VrListenerService, to ensure that only the system can bind to it.

Must be required by a WallpaperService, to ensure that only the system can bind to it.

Allows applications to connect to paired bluetooth devices.

Allows applications to discover and pair bluetooth devices.

required to be able to connect to paired Bluetooth devices.

Allows applications to pair bluetooth devices without user interaction, and to allow or disallow phonebook access or message access.

required to be able to discover and pair nearby Bluetooth devices.

Allows an application to access data from sensors that the user uses to measure what is happening insIDe their body, such as heart rate.

Allows an application to broadcast a notification that an application package has been removed.

Allows an application to broadcast an SMS receipt notification.

Allows an application to broadcast sticky intents.

Allows an application to broadcast a WAP PUSH receipt notification.

Allows an app which implements the InCallService API to be eligible to be enabled as a calling companion app.

Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.

Allows an application to call any phone number, including emergency numbers, without going through the Dialer user interface for the user to confirm the call being placed.

required to be able to access the camera device.

Allows an application to capture audio output.

Allows an application to change whether an application component (other than its own) is enabled or not.

Allows an application to modify the current configuration, such as locale.

Allows applications to change network connectivity state.

Allows applications to enter Wi-Fi Multicast mode.

Allows applications to change Wi-Fi connectivity state.

Allows an application to clear the caches of all installed applications on the device.

Allows enabling/disabling location update notifications from the radio.

old permission for deleting an app's cache files, no longer used, but signals for us to quIEtly ignore calls instead of throwing an exception.

Allows an application to delete packages.

Allows applications to RW to diagnostic resources.

Allows applications to disable the keyguard if it is not secure.

Allows an application to retrIEve state dump information from system services.

Allows an application to expand or collapse the status bar.

Run as a manufacturer test application, running as the root user.

Allows a regular application to use Service.startForeground.

Allows access to the List of accounts in the Accounts Service.

Allows access to the List of accounts in the Accounts Service.

Allows an application to find out the space used by any package.

This constant was deprecated in API level 21. No longer enforced.

This permission can be used on content provIDers to allow the global search system to access their data.

Allows an app to prevent non-system-overlay windows from being drawn on top of it

Allows an app to access sensor data with a sampling rate greater than 200 Hz.

Allows an application to install a location provIDer into the Location Manager.

Allows an application to install packages.

Allows an application to install a shortcut in Launcher.

Allows an instant app to create foreground services.

Allows interaction across profiles in the same profile group.

Allows applications to open network sockets.

Allows an application to call ActivityManager.killBackgroundProcesses(String).

Allows a data loader to read a package's access logs.

Allows an application to use location features in harDWare, such as the geofencing API.

Allows an application to manage access to documents, usually as part of a document picker.

Allows an application a broad access to external storage in scoped storage.

Allows an application to modify and delete media files on this device or any connected storage device without user confirmation.

Allows to query ongoing call details and manage ongoing calls

Protection level: signature|appop

Allows a calling application which manages its own calls through the self-managed ConnectionService APIs.

Not for use by third-party applications.

Allows an application to kNow what content is playing and control its playback.

Allows an application to modify global audio settings.

Allows modification of the telephony state - power on, mmi, etc.

Allows formatting file systems for removable storage.

Allows mounting and unmounting file systems for removable storage.

Allows applications to perform I/O operations over NFC.

Allows applications to receive NFC preferred payment service information.

Allows applications to receive NFC transaction events.

Allows an application to collect component usage statistics

Declaring the permission implIEs intention to use the API and the user of the device can grant permission through the Settings application.

This constant was deprecated in API level 15. This functionality will be removed in the future; please do not use. Allow an application to make its activitIEs persistent.

This constant was deprecated in API level 29. Applications should use @L_502_47@ instead of the Intent.ACTION_NEW_OUTGOING_CALL broadcast.

Allows query of any normal app on the device, regardless of manifest declarations.

Allows an application to read the user's calendar data.

Allows an application to read the user's call log.

Allows an application to read the user's contacts data.

Allows an application to read from external storage.允许应用程序从外部存储读取。声明了WRITE_EXTERNAL_STORAGE权限的任何应用都将会被隐式授予此权限。

在API级别16中，防护等级：危险，常数值：“ androID.permission.READ_EXTERNAL_STORAGE”

This constant was deprecated in API level 16. The API that used this permission has been removed.

Allows an application to read the low-level system log files.

Allows read access to the device's phone number(s).

Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a List of any PhoneAccounts registered on the device.

Allows read only access to precise phone state.

Allows an application to read SMS messages.

Allows applications to read the sync settings.

Allows applications to read the sync stats.

Allows an application to read voicemails in the system.

required to be able to reboot the device.

Allows an application to receive the Intent.ACTION_BOOT_COMPLETED that is broadcast after the system finishes booting.

Allows an application to monitor incoming MMS messages.

Allows an application to receive SMS messages.

Allows an application to receive WAP push messages.

Allows an application to record audio.

Allows an application to change the Z-order of tasks.

Allows app to request to be associated with a device via CompanionDeviceManager as a "watch"

Protection level: normal

Allows a companion app to run in the background.

Allows a companion app to use data in the background.

Allows an application to request deleting packages.

Permission an application must hold in order to use Settings.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS.

Allows an application to request installing packages.

Allows an application to subscribe to notifications about the presence status change of their associated companion device

Allows an application to request the screen lock complexity and prompt users to update the screen lock to a certain complexity level.

This constant was deprecated in API level 15. The ActivityManager.restartPackage(String) API is no longer supported.

Allows an app to use exact alarm scheduling APIs to perform timing sensitive background work.

Allows an application (Phone) to send a request to other applications to handle the respond-via-message action during incoming calls.

Allows an application to send SMS messages.

Allows an application to broadcast an Intent to set an alarm for the user.

Allows an application to control whether activitIEs are immediately finished when put in the background.

Modify the global animation scaling factor.

Configure an application for deBUGging.

This constant was deprecated in API level 15. No longer useful, see PackageManager.addPackageToPreferred(String) for details.

Allows an application to set the maximum number of (not needed) application processes that can be running.

Allows applications to set the system time directly.

Allows applications to set the system time zone directly.

Allows applications to set the wallpaper.

Allows applications to set the wallpaper hints.

Allow an application to request that a signal be sent to all persistent processes.

This constant was deprecated in API level S. The API that used this permission is no longer functional.

Allows an application to start foreground services from background, can only be granted to privileged apps or app that is SMS/EMERGENCY/SYstem galLERY roles.

Allows the holder to start the permission usage screen for an app.

Allows an application to open, close, or disable the status bar and its icons.

Allows an app to create windows using the type WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.

Allows using the device's IR transmitter, if available.

Don't use this permission in your app.

Allows an application to update device statistics.

Allows an app to use device supported biometric modalitIEs.

This constant was deprecated in API level 28. Applications should request USE_BIOMETRIC instead

required for apps targeting Build.VERSION_CODES.Q that want to use notification full screen intents.

Allows to read device IDentifIErs and use ICC based authentication like EAP-AKA.

Allows an application to use SIP service.

Allows access to the vibrator.

Allows using PowerManager WakeLocks to keep processor from sleePing or screen from dimming.

Allows applications to write the apn settings and read sensitive fIElds of an existing apn settings like user and password.

Allows an application to write the user's calendar data.

Allows an application to write (but not read) the user's call log data.

Allows an application to write the user's contacts data.

Allows an application to write to external storage.允许应用程序写入外部存储。声明该权限的任何应用都将隐式授予androID.permission.READ_EXTERNAL_STORAGE从外部存储读取的权限。

在API级别4中添加，防护等级：危险，常数值：“ androID.permission.WRITE_EXTERNAL_STORAGE”

Allows an application to modify the Google service map.

Allows an application to read or write the secure system settings.

Allows an application to read or write the system settings.

Allows applications to write the sync settings.

Allows an application to modify and remove existing voicemails in the system.