search

rogerta / secrets-for-android

Securely store and manage passwords and secrets on your Android phone.
70 stars 36 forks source link

Consider publishing for 1.5 or higher #75

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Secrets installs with no permissions required, but OS 2.1 reports it has 
Phone Call permissions.

You mentioned publishing for 1.5 corrects this issue. It would help some of us 
not be so paranoid if backward compatibility was resolved. :)

Jim

Original issue reported on code.google.com by liquidpr...@gmail.com on 22 Jul 2010 at 7:27

GoogleCodeExporter commented 9 years ago 
Thanks for reporting the bug Jim.

Note that android does tell the user before installing Secrets, as well as
each time Secrets is updated, that it wants permission to access your phone
state.  If this is not happening for you, this seems like an android bug
and not a Secrets bug.

As we discussed over email:

This is an android backward compatibility issue.  Old versions of
android allowed apps to access the phone state even without asking for
it.  New versions of android require apps to explicit ask for access
to the phone state.  However, when a newer version of android runs an
app that says it supports old versions of android, the OS has no idea
whether that app needs to access the phone state or not, even if it
does not ask for access.  In order to not to break that app, android
automatically gives the app access to the phone state, but also tells
the user about it.

Since secrets still says it supports Android 1.1, it is automatically
being given access to the phone state, and as a user you are being
told about this.  However, secrets does not and has no need to access
the phone state.

Updating secrets to say it only supports android 1.5 and above solves
this problem (at the expense of no longer supporting older devices).
Android will no longer automatically give Secrets access to
the phone state.

Original comment by roge...@google.com on 22 Jul 2010 at 9:06

GoogleCodeExporter commented 9 years ago 
I'm running 2.1-update1 and I do not get notified.

Original comment by liquidpr...@gmail.com on 23 Jul 2010 at 6:05

GoogleCodeExporter commented 9 years ago 
Secrets 1.9.5 supports Android 1.6 or later.  The permissions have be reduced 
to only reading and writing to the SD card.

Fixed in revision 122.

Original comment by ro...@tawacentral.net on 14 Sep 2010 at 1:56