#PMChallenge- integrated permission manager (oneplus privacy) to preclude permission misuse

  1. Pratik Magadwar
    Eclair Feb 8, 2019

    Pratik Magadwar , Feb 8, 2019 :
    Who are the users ?
    For all users who wants to use every tempting feature provided by the android which makes their life easier and joyful but at the same time securing their privacy without worrying about any privacy casualties for example if a user wants to tag a location or take a photo inside a particular app, but don't want that app to be able to use the camera or get user's location redundantly whenever it wants?

    What is the purposed function?
    A better way to manage app permissions for all the smartphone users who has to unwillingly grant a sensitive permission to the application in order to use the particular feature of the app. This native feature gives users the ability to grant permissions temporarily.Once this service is activated and unwanted apps are blacklisted and when user exit the app, privacy service will automatically remove the permission for the user in an instant so he/she can get back to doing what they do best, without having to worry about apps invading their privacy and wasting the battery.
    New Doc 2019-02-09 03.36.14_1.jpg
    The privacy service will be designed for one-time permissions, not for permissions where users only want the app to have them in the foreground. this feature can be used for both purposes but as one use apps throughout the day they will be in the foreground a lot of the time.

    what is the user value ?
    1.Permissions per application are managed properly security, privacy and battery life
    2.Users never have to worry what apps are doing in the background
    3.Users don't have to buy and install any third party application which will again ask for permission to keep track on all apps in the background for permission usage per app and rescind some sensitive permissions if the user don't want it to be unnecessarily used by that application and on the other hand novice users don't have to follow any hectic process of revoking permission by rooting in order to use any magisk module or by providing adb permissions via pc to any third party privacy manager app.

    How does it work?
    New Doc 2019-02-09 03.36.14_2.jpg New Doc 2019-02-09 03.33.28_2.jpg
    Inside the utilities option provided by oneplus in device settings where there will be an additional option to activate this service called oneplus privacy. Once the privacy service is activated it will start tracking the every permissions asked.Once user enable options, a notification box will appear anytime you enable permissions in an Android app. As an example,When user opened up a newly installed app, the familiar permissions box appeared. Once he/she hit OK, a oneplus privacy notification will appear on top of the screen status bar with the message ( ˣʸᶻ ᵃᵖᵖˡⁱᶜᵃᵗⁱᵒⁿ ᵍʳᵃⁿᵗᵉᵈ ᶜᵃᵐᵉʳᵃ - ʷᵒᵘˡᵈ ʸᵒᵘ ˡⁱᵏᵉ ᵗᵒ ʳᵉᵐᵒᵛᵉ ⁱᵗ ʷʰᵉⁿ ʸᵒᵘ ᵉˣⁱᵗ ᵃᵖᵖ ?) With three options "KEEP, REMOVE, SCHEDULE".
    • Keep — keep this new permission access granted permanently.
    • Remove — remove the permission when you hit your Home button and exit back to the home screen.
    • Schedule — keep the permission enabled for a set amount of time, after which Bouncer will remove it.
    The notification box stays in your shade until you interact with it, so you don’t have to worry about having to make a decision right there on-the-fly. Your Schedule options are pretty thorough, although an option to specifically choose how long you want the permissions to last would be nice
    Once the user selects the option to remove it. So further will automatically remove that permission either when you exit the app in question or after a certain amount of time has passed or when he/she are not using that black listed app and they are on home screen or the device screen is off, oneplus privacy will open the app's settings and remove the permission for you extremely quickly.
    Yes, an app that can turn off permissions can also turn them on. But oneplus privacy requests no permissions. It cannot see info inside apps except for the settings app (so it can turn permissions off) also it doesn't have the internet permission so even if it could get sensitive info (which it can't) it couldn't transmit it anywhere.
    One more function this privacy manager can offer is that even if user grants the permission for the apps while using the app or the app is secretly using the permissions in baground all of this activity will be recorded and shown to the user under privacy manager settings.(eg. This app uploaded images to its server used phones camera unknowingly)

    If there are existing comparable functions in the smartphone industry, how is your proposed feature superior?
    There is an paid application called bouncer on the playstore which manages all permission granted to the apps by keeping or removing it as per the user preference
    But my proposed feature is way more superior then installable app due to two reasons:
    1. The privacy feature or the oneplus privacy which i have proposed will be inbuilt and completely free for every user of oxygen OS.
    2. It will be more trustful and preferable from the user's side as this system intigrated feature rather than any third party privacy manager.Thus users will consider this more accurate and secured as its working under their favour.
    Last edited: Feb 9, 2019

    Ruby G. and Maria Pap like this.
  2. Sridhar Ananthanarayanan
    Lollipop Feb 9, 2019

    Sridhar Ananthanarayanan , Feb 9, 2019 :
    I know you picked up this idea from an app called Bouncer on the Play Store.

    I personally find it pointless to have that app. If an app wants to steal your privacy, the size of that data (like your contacts, SMS, etc) is very small, and it is easy for it upload that data when you are using the app. So granting all the requested permissions when using the app would mean the app can still invade into your privacy. It is not like all such things happen only in the background.

    This sort of an implementation is superfluous and ineffective.

  3. Pratik Magadwar
    Eclair Feb 9, 2019

    Pratik Magadwar , Feb 9, 2019 :
    But I have add a new option under 1 + privacy that whenever app tries to get your contacts photos or location it will be recorded by the privacy and will be shown when the user opens privacy app so that the user will come to know what the app used in the background without his permission

  4. Sridhar Ananthanarayanan
    Lollipop Feb 9, 2019

    Sridhar Ananthanarayanan , Feb 9, 2019 :
    The correct solution would be to disable permissions to items that you think is unnecessary for the app. What is the point of granting permissions and then continuously keeping a log of it. It will ruin user experience to be constantly notified with logs everytime you use an app.

  5. anupritaisno1
    KitKat Feb 9, 2019

    anupritaisno1 , Feb 9, 2019 :
    2 questions:
    How does your idea improve the already existing permissions API?
    How do apps cope up with an api specific to oneplus devices without the need to update these apps to support the API?

  6. Pratik Magadwar
    Eclair Feb 9, 2019

    Pratik Magadwar , Feb 9, 2019 :
    The feature of permission manager is already coming to Android q but it is only supported by system level application with this add on of privacy feature by oneplus will provide an extra function to manage 3rd party app permissions