harmony 鸿蒙Requesting Restricted Permissions

2025-06-12
浏览 (3)

Requesting Restricted Permissions

Generally, restricted permissions are unavailable to third-party applications. If an application with a lower APL requires a permission of a higher APL, you can declare the required permissions in the Access Control List (ACL).

For example, if a normal application needs to use the global floating window, it needs the ohos.permission.SYSTEM_FLOAT_WINDOW permission, which is of the system_basic level. If the application needs to capture a screen image, it needs the ohos.permission.CAPTURE_SCREEN permission, which is of the system_core level. To enable the normal application to have system_basic and system_core permissions, you must use the ACL.

The methods provided in this topic apply only for the applications in the debug phase. If you need to develop an application of the commercial version, apply for a release certificate and signing file in the app market.

Method 1: Use DevEco Studio to request permissions via ACL.
Method 2: Declare the required permissions in the HarmonyAppProvision configuration file.
1. Open the Sdk/openharmony/_{Version} _/toolchains /lib/UnsgnedReleasedProfileTemplate.json file in the SDK directory.
2. Add the restricted permissions to be requested.
3. Add the restricted permissions that do not carry permission data in acls > allowed-acls.
4. Add the restricted permissions that carry permission data in the app-services-capabilities field.
```
  {
    // ...
    "acls":{
      "allowed-acls":[
        "ohos.permission.WRITE_AUDIO",
        "ohos.permission.CAPTURE_SCREEN"
      ]
    },
    "app-services-capabilities": {
        "ohos.permission.ACCESS_DDK_DRIVERS": "..."
    }
  }
```
1. Sign the application again.