harmony 鸿蒙Application Permissions

2025-06-12
浏览 (3)

Application Permissions

The way to request permissions varies, depending on its applicable scope and authorization mode. Determine the appropriate way to request permissions based on actual situation.

The system provides the following permissions:

Open system_grant permissions

The permissions are available to all applications and granted by the system. The permissions requested by an application are automatically granted when the application is installed.

Open user_grant permissions

The permissions are available to all applications and granted by the user. The permissions requested by an application must be authorized by the user in a dialog box during the running of the application.

Restricted permissions

Restricted permissions are system_basic permission that can be granted to normal applications.

Permissions for enterprise applications

The permissions are available only to normal enterprise applications, mobile device management (MDM) applications, and system applications. The applications with the distribution type (app-distribution-type) of enterprise_normal (normal enterprise application) or enterprise_mdm (MDM application) can request this type of permissions. When requesting such a permission, you need to determine the authorization mode first.

Permissions for MDM applications

The permissions are available only to MDM applications. When requesting such a permission, you need to determine the authorization mode first.

Permissions for system applications

The permissions for system applications are classified into the following types:

system_grant permissions available to system applications via ACL:

The permissions are authorized by the system and can be requested via ACL. The ACL allows a system application or system service to have permissions beyond its Ability Privilege Level (APL). The requested permissions will be automatically granted when the application is installed.
system_grant non-ACL permissions for system applications:

The permissions cannot be requsted via ACL. You need to quey the application’s APL and determine whether the application can request the permissions. The requested permissions will be automatically granted when the application is installed.
user_grant permissions available to system applications via ACL:

The permissions can be requested via ACL and must be authorized by the user. After an application requests this type of permissions via ACL, the permissions must be authorized by the user in a dialog box during the running of the application.