dstark5 / dstark5/Openlib

Question on permissions

Open
#63 10 comments 0 reactions 0 assignees View on GitHub
Dominant language
Dart
Stars
2.5k
Forks
130
PR merge metrics
No merged PRs in 30d

Description

Scanner report for today's update reads:

! repo/com.app.openlib_2008.apk declares sensitive permission(s): android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_AUDIO android.permission.MANAGE_EXTERNAL_STORAGE android.permission.READ_EXTERNAL_STORAGE

![image](https://github.com/dstark5/Openlib/assets/6781438/c4905094-6259-47c7-b013-91dfe8ee1813)

I guess `READ_EXTERNAL_STORAGE` is for eading downloaded material (as `WRITE_EXTERNAL_STORAGE` is to save eBooks; together with `MANAGE_EXTERNAL_STORAGE` on Android 11+). Can you confirm this?

What I however do not understand (at least going by the app description) is what media access (images and audio) is needed for. A clarification would be much appreciated!

As for `DEPENDENCY_INFO_BLOCK`: this can probably be avoided easily via some gradle settings:

```gradle
android {
dependenciesInfo {
// Disables dependency metadata when building APKs.
includeInApk = false
// Disables dependency metadata when building Android App Bundles.
includeInBundle = false
}
}
```

For some background: that BLOB is supposed to be just a binary representation of your app's dependency tree. But as it's encrypted with a public key belonging to Google, only Google can read it – and nobody else can even verify what it really contains.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.