Path: ...!3.eu.feeder.erje.net!feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Arno Welzel <usenet@arnowelzel.de>
Newsgroups: comp.mobile.android
Subject: Re: Android keyboard: your choice.
Date: Thu, 20 Jun 2024 18:05:50 +0200
Lines: 46
Message-ID: <ldj2atFs5uU2@mid.individual.net>
References: <20240617114559.a2970ac2923facc44a2ec355@gmail.com>
 <v4ov83$j5oj$1@dont-email.me> <v4sojj$1gqik$1@dont-email.me>
 <lde8tqF9a76U1@mid.individual.net>
 <v4tkrl$1bpq$1@nnrp.usenet.blueworldhosting.com>
 <v4u0gu$1rom7$2@dont-email.me> <ldia57Frps7U7@mid.individual.net>
 <v51gfu$2kg3e$2@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Trace: individual.net DSZX6lTzGS3M+yxjieiBygrUViIhT6KB7uwnd+xkQuWENWooTc
Cancel-Lock: sha1:Rgthc7RnqG/xnQ09pkkYe23Pc4g= sha256:+Jd2lZsXVr3AUX9p0rz5UW+TDPfC7i7OIKg3ezjr3sQ=
Content-Language: de-DE
In-Reply-To: <v51gfu$2kg3e$2@dont-email.me>
Bytes: 2825

R.Wieser, 2024-06-20 16:53:

> Arno,
> 
>> The contacts permission is off by default in this app and is only needed
>> when you enable "Suggest Contact names" in the "Text correction" settings.
> 
> "The contacts permission is off by default in this app" ?

Yes, when you install the app, this permission will not be requested.
You *can* enable it, but it is activated by default.

> That sounds like as if the app is managing its own permissions, and I *hope* 
> that that is not what you ment ...

An app *must* contain the permission request in the manifest, regardless
if it actually uses it or not. And Heliboard includes the *request* for
contact permission but will *not* ask to use it until you enable the
"Suggest Contact names" in the settings.

> But maybe you just mean that the permission will only actually be asked for 
> when it tries to access the contacts (and not when installing).   But how 
> does that make a difference ?     It still wants to access that contacts 
> data.

It will only access contact data, when you enable the setting for it in
the app, otherwise not.

>> Before complaining about how insecure an app is you should first check it!
> 
> Are you teling me I must be a fullblown Java programmer before I'm allowed 
> to mention stuff I would never want to give the permission for ?   I hope 
> not.

No, you just see, what happens, if you let this permission disabled. If
the app still works without any error, it does not read contact data.

Also see the options in the app - "Suggest Contact names" is a good hint
what the permission for contact reading is used for. Better than just
assuming that the app does not respect your privacy just because of an
*optional* permission.

-- 
Arno Welzel
https://arnowelzel.de