IBM Security MaaS360

 View Only
  • 1.  Android App Permissions

    Posted Fri December 11, 2020 12:26 PM
    In the past I was able to add Android apps to the catalog and before approving the app. there was an option to accept the app with current permissions, and in case the permissions required by the app changed then the app would not be approved or approve the app and continue to approve the app even if the permissions changed. 

    Is this an error in the UI? 
    Was it removed intentionally ?




    ------------------------------
    Enrique Ruiz
    Mobile Platform Engineer
    The Church of Jesus Christ of Latter Day Saints
    8012407034
    ------------------------------


  • 2.  RE: Android App Permissions

    Posted Fri December 11, 2020 04:58 PM

    Hi Enrique,

    This was a behavior change with the way Google Play for Work performs.  When the app is approved now, it accepts all permissions in perpetuity by default.  If you would like to change the permissions settings for an individual app, navigate to play.google.com/work (be sure that you are signed in with the account that MaaS360 is bound to), find the app in question, and select the Approval Preferences.  You'll also be able to setup notifications to get emails when the permissions for an app change.



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 3.  RE: Android App Permissions

    Posted Tue August 08, 2023 12:50 PM

    Based on your description, it appears that the ability to approve Android apps based on their permissions has undergone a change in functionality. Without specific context about the platform or system you're referring to, I can provide some general insights:

    1. Error in the UI: If the option to approve an app with current permissions is missing or not functioning as described, it could potentially be an error in the user interface (UI). UI errors can occur due to bugs in the software or unintended changes made during updates.

    2. Intentional Removal: Alternatively, the change you're experiencing might have been intentionally implemented by the platform or operating system. Changes to app approval processes, permissions, and security measures are sometimes made to enhance user privacy and security. If the platform decided to remove the ability to approve apps based on current permissions, it might have been a conscious decision to improve the app review process or align with updated privacy standards.

    To determine whether this change is an error in the UI or an intentional removal, you could consider the following steps:

    • Check the platform's official documentation or developer resources to see if any announcements were made regarding changes to the app approval process or permissions.
    • Look for user feedback or forum discussions to see if other users are experiencing the same change.
    • Contact the platform's support team for clarification on whether this change is intentional or unintentional.

    Remember that platform updates can introduce changes in functionality, and while some changes may seem unexpected, they are often made with the intention of improving the user experience, privacy, and security.

    Android NTA



    ------------------------------
    Rodrigo Pedrosa
    ------------------------------



  • 4.  RE: Android App Permissions

    Posted Wed August 09, 2023 04:28 AM

    Hi all

    The original post by Matt Shaver (who has since left the company) related to Google for Work which has since been renamed to Android Enterprise. 

    This is a critical shift in management of Android devices which needs to be taken into account in this context. 

    We have recorded a number of webinars related to Android Enterprise to ensure our customers understand the context clearly and succinctly. 

    I highly recommend you review the first one if you haven't seen it: https://community.ibm.com/community/user/security/blogs/ciaran-darcy/2022/05/12/android-enterprise-webinars

    After this if you need to specify permissions for apps you can do so in the Android Enterprise settings of the Android device policy, in the following sections: 

    • Restrictions > Configure Pacakage Delegation
    • App Compliance > Configure Restricted Applications by App Permissions
    • Security > Default runtime permission for apps

    I hope this helps. 



    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------