Unwanted android permissions in android manifest

I have made three education apps for kids and when they were installed on android devices there are three warnings raised:

=“android.permission.INTERNET”
=“android.permission.ACCESS_NETWORK_STATE”
=“android.permission.READ_PHONE_STATE”

Now, the apps do not require either one of these permissions. We scanned the forum, the net and got bits an pieces but no real solution to the issue on hand.The solution: “Decompile, edit the APK and remove the permissions, recompile” is a quite elaborate workaround, but really helpful?
I must agree with Bohumil; we really, really need a solution to this issue (Also mentioned by Naomi in #10)
Well, these 3 warnings do stop sales. Especially, for educational apps for kids and games not requiring the internet. We have installed 3 kiddies apps together with parents, apps which I have made with CORONA, and we have asked if they would buy them. Most anwers were: NO. Why? Mostly because of the warnings. All got quide suspicious because they did not expect such warnings(permissions) in a small number adding puzzle game. The other anwers; well, you can`t get everything right

The “workaround” to remove these three “unwanted” adroid permissions can be a quick help, if CORODA will help. But, to me, as developer, it is most cruicial to have control of the android manifest!!
It looks like a “default” android manifest is included in the apps build by CORONA. What are all the permissions in this “default” android manifest? Why are there permissions, that the developer did not confirm in the android manifest? What happens if this “default” android manifest is changed", or deleted altogether, or whatnot?

To me, the developer and only the deleloper, following the Android Guidelines, should have control of the android manifest. I cannot responsibly publish an app, which android manifest contains entries which I don`t know, which were made by “who knows” and which could be changed by “who knows”. (I appreciate and am aware of the Android 3 to 4.2 releases involved).

But to change the APK manually is not an alternative, in my opinion.
Permit me to make the following suggestion:
As we are putting “additonal” permissions to the android manifest via build.lua, we could put ALL required permissions in the build.lua. It should then be possible for CORONA to create the android manifest based exclusively on the enties in build.lua. After all, it`t just an XML which needs to be included in the app building, which CORONA might be doing anyway.

Benefits: The developer has control and resposibility of the android manifest as only the permissions in build.lua would be in the android manifest. No workaround, no dodgeing. Nice for CORONA :slight_smile:

Can we please, please have from CORONA a workaround to get rid of the unwanted permissions quickly?
And can CORONA please provide the anwers to my questions above and hopefully take up my suggestion, or find a better alternative.

CORONA is quite exiting. Please solve the problem the we, the developers know and control what is in the android manifest.
Thank you very much for your help - we really need it here.

Dieter
[import]uid: 185880 topic_id: 33398 reply_id: 333398[/import]

++++++++5,000,000,000,000 and more

@dieter.gauss

You must have phone state if your on any phone device at all. It must be able to tell when a phone call is coming in.

@Corona, we should be able to specify something in our build settings or config file to add / remove access permissions. I have had lots of people email me directly who stated they like the app they tested but removed it because of permissions that were enabled that they thought i did not need.

Can someone respond here and let us know what Corona’s stand on this issue.

Thanks

Larry Meadows
DoubleSlashDesign.com
[import]uid: 11860 topic_id: 33398 reply_id: 132673[/import]

Larry,

thanks a lot for your support! I hope we get more members to join in.
Sorry, I didn`t mention that the phone state warning also pops up on pads.

Thanks
Dieter [import]uid: 185880 topic_id: 33398 reply_id: 132736[/import]

+1

+1000 But to change the APK manually is not an alternative, in my opinion. [import]uid: 40033 topic_id: 33398 reply_id: 132762[/import]

++++++++5,000,000,000,000 and more

@dieter.gauss

You must have phone state if your on any phone device at all. It must be able to tell when a phone call is coming in.

@Corona, we should be able to specify something in our build settings or config file to add / remove access permissions. I have had lots of people email me directly who stated they like the app they tested but removed it because of permissions that were enabled that they thought i did not need.

Can someone respond here and let us know what Corona’s stand on this issue.

Thanks

Larry Meadows
DoubleSlashDesign.com
[import]uid: 11860 topic_id: 33398 reply_id: 132673[/import]

Larry,

thanks a lot for your support! I hope we get more members to join in.
Sorry, I didn`t mention that the phone state warning also pops up on pads.

Thanks
Dieter [import]uid: 185880 topic_id: 33398 reply_id: 132736[/import]

+1

+1000 But to change the APK manually is not an alternative, in my opinion. [import]uid: 40033 topic_id: 33398 reply_id: 132762[/import]

+1

Can we have some attention to this? :slight_smile: [import]uid: 70056 topic_id: 33398 reply_id: 133402[/import]

+1

Can we have some attention to this? :slight_smile: [import]uid: 70056 topic_id: 33398 reply_id: 133402[/import]

can anyone help on this??? [import]uid: 91460 topic_id: 33398 reply_id: 134470[/import]

can anyone help on this??? [import]uid: 91460 topic_id: 33398 reply_id: 134470[/import]

Anyone already got some workaround for these questions?
I would really like to know, got exactly the same questions. :slight_smile:

[import]uid: 123200 topic_id: 33398 reply_id: 138568[/import]

Anyone already got some workaround for these questions?
I would really like to know, got exactly the same questions. :slight_smile:

[import]uid: 123200 topic_id: 33398 reply_id: 138568[/import]

+1

I also encountered the same problem and I need a solution to remove unnecessary permissions. [import]uid: 174332 topic_id: 33398 reply_id: 139737[/import]

http://feedback.coronalabs.com/forums/188732-corona-sdk-feature-requests-feedback/suggestions/3574927-be-able-to-edit-android-manifest-disable-certain-o

I made a feature request for this. Vote if you want this as a feature. [import]uid: 100901 topic_id: 33398 reply_id: 139765[/import]

Why aren’t Coronalabs commenting on this? I’d say this is a delicate issue that should have gotten some attention from Corona a long time ago. [import]uid: 21746 topic_id: 33398 reply_id: 139774[/import]

Please see this link:

http://developer.coronalabs.com/forum/2012/07/22/very-disturbing-hidden-network-traffic-corona-sdk-breaks-jellybean#comment-116774

But to summarize, the Corona Core has lots of libraries built into it, like being able to open the url: tel:+1-555-555-1212… needs the Phone permission for instance. There are a bunch of API calls that need scoured to trap against this as Josh’s post points out.

Yes, we know this is something needed, but so are a bunch of other features that you’ve been asking for too. Which is more important? Fixing this or giving you access to Amazon’s Store API? That’s an esoteric question because you might think #1 is most important while another user thinks #2 is most important.

The community has also been asking for a way to vote up/down feature requests. +1’s here are great, but they tend to get lost in forum threads. Today we opened a new feature to help us gauge what things need to be voted on. Please see today’s blog post:

http://www.coronalabs.com/blog/2013/01/21/corona-feature-requests-and-feedback/

So go to the link posted above in reply #8 and use your votes to vote up that feature (or any of the other features that you may want).
[import]uid: 199310 topic_id: 33398 reply_id: 139800[/import]

+1

I also encountered the same problem and I need a solution to remove unnecessary permissions. [import]uid: 174332 topic_id: 33398 reply_id: 139737[/import]

http://feedback.coronalabs.com/forums/188732-corona-sdk-feature-requests-feedback/suggestions/3574927-be-able-to-edit-android-manifest-disable-certain-o

I made a feature request for this. Vote if you want this as a feature. [import]uid: 100901 topic_id: 33398 reply_id: 139765[/import]

Why aren’t Coronalabs commenting on this? I’d say this is a delicate issue that should have gotten some attention from Corona a long time ago. [import]uid: 21746 topic_id: 33398 reply_id: 139774[/import]