Revise Android permissions

getcanoe / canoe

Canoe is a Nano Wallet heavily based on the MIT licensed Copay wallet from Bitpay

https://getcanoe.io

MIT License

142 stars 28 forks source link

Revise Android permissions #233

Open rtaibah opened 6 years ago

rtaibah commented 6 years ago

Canoe requests some permissions that it doesn't need. Mic, phone, USB....etc.

We need to justify these

gokr commented 6 years ago

Here we have good instructions for getting rid of mic at least: https://software.intel.com/en-us/forums/intel-xdk/topic/543472

averissimo commented 6 years ago

Please do: Microphone and call information.

This seems like a bug, not an enhancement and is a deal breaker for some users to test/use

I'm actually using a docker image instead of mobile or linux native due to concerns with extra permissions for a third party app to manage my wallet

iljah commented 5 years ago

+1, wanted to try out nano along side btc lightning but I'm not giving this wallet permissions to:

read phone status and identity
record audio
change audio settings

gokr commented 5 years ago

The audio stuff is due to us using an audio plugin to play sounds. Unfortunately the plugin can do much more, and yes, we should restrict it down. The phone status and identity... not sure, nothing we use at least.

iljah commented 5 years ago

What about using regular system notification sounds or something? I don't think that would require audio permissions.

gokr commented 5 years ago

I added this to next milestone, see if we can do something at least.