Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EXTENDED_ACCESS permission #149

Open
mar-v-in opened this issue Jul 1, 2016 · 0 comments
Open

EXTENDED_ACCESS permission #149

mar-v-in opened this issue Jul 1, 2016 · 0 comments
Labels
confirmed security

Comments

@mar-v-in
Copy link
Member

mar-v-in commented Jul 1, 2016 •
edited
Loading

The EXTENDED_ACCESS permission is designed to provide features to app that in original Google Play Services are only available to Google apps (checked using signature). The security model of this functionality is not well-designed and should be improved

  • The permission should never be granted silently without user consent
  • Different data should have separated access, e.g. Google Plus friend list is not accessible to apps only requiring access to Android Wear details.
    This could be realized by splitting up EXTENDED_ACCESS permission further or independently from the actual permission request (dynamically)
@mar-v-in mar-v-in mentioned this issue Jul 1, 2016
Closed
@mar-v-in mar-v-in added this to the sooner milestone Jul 1, 2016
@mar-v-in mar-v-in removed this from the sooner milestone Mar 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
confirmed security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mar-v-in