Privilege

Privilege is a predefined collection of privileged APIs that can be assigned to the application to allow it to call the privileged APIs:

  • Device API
  • W3C/HTML5
  • Supplementary

Tizen provides API-level access control for security-sensitive operations which, if not used correctly, can harm user privacy and system stability. Therefore, applications that use such sensitive APIs must declare the required privileges in the config.xml file. Privileges are categorized into public, partner, and platform levels according to their hierarchy:

  • The public level is the minimum privilege level, which means that any application developed using Tizen Studio can use these privileges.
  • The partner level privileges require at least a partner-signed certificate which is granted to developers who have a business relationship with the vendor.
  • The platform level is the highest privilege level, and an application that needs these privileges requires at least a platform-signed certificate, which is granted to vendor developers.

The following tables list the API privileges, which you must to declare when using security-sensitive API modules.

Table: TV Web Device API privileges

Privilege Level Privacy Since Description
http://tizen.org/privilege/alarm Public   2.3 This application can manage alarms by retrieving saved alarms and waking the device up at scheduled times.

http://tizen.org/privilege/application.info

 Public   2.3 This application can retrieve information related to other applications.
http://tizen.org/privilege/application.launch Public   2.3 This application can open other applications using the application ID or application control.
http://tizen.org/privilege/appmanager.certificate Partner   2.3 This application can retrieve specified application certificates.
http://tizen.org/privilege/appmanager.kill Partner   2.3 This application can close other applications.
http://tizen.org/privilege/bluetooth Public   3.0 This application can share data with other devices.
http://tizen.org/privilege/content.read Public   2.3 This application can read media content information.
http://tizen.org/privilege/content.write Public   2.3 This application can change media information. This information can be used by other applications.
http://tizen.org/privilege/datacontrol.consumer Public   2.4 This application can read data exported by data control providers.
http://tizen.org/privilege/download Public   2.3 This application can manage HTTP downloads. This may result in additional charges depending on your payment plan.
http://tizen.org/privilege/filesystem.read Public   2.3 This application can read file systems.
http://tizen.org/privilege/filesystem.write Public   2.3 This application can write to file systems.
http://tizen.org/privilege/fullscreen Public   2.3 This application can use full screen view.
http://tizen.org/privilege/keymanager Public   2.4 This application can save keys, certificates, and data to, and retrieve and delete them from, password-protected storage. Checking the statuses of certificates while connected to a mobile network may result in additional charges depending on your payment plan.
http://tizen.org/privilege/led Public   2.4 This application can turn LEDs on or off, such as the LED on the front of the device and the camera flash.
http://tizen.org/privilege/package.info Public

 

 2.3 This application can receive package information.
http://tizen.org/privilege/packagemanager.install Platform   2.3 This application can install or uninstall application packages.
http://tizen.org/privilege/push Public   3.0 This application can receive notifications via the Internet. This may result in additional charges depending on your payment plan.
http://tizen.org/privilege/system Public   2.3 This application can read system information.
http://tizen.org/privilege/systemmanager Partner   2.3 This application can read secure system information.
http://tizen.org/privilege/telephony Public   2.4 This application can retrieve telephony information, such as the network and SIM card used, the IMEI, and the statuses of calls.
http://tizen.org/privilege/tv.audio Public   2.3 This application can change the volume, enable and disable Silent mode, detect volume changes, and play beeps.
http://tizen.org/privilege/tv.channel Public   2.3 This application can change the TV channel, read information about TV channels and programmes, and receive notifications when the TV channel has been changed.
http://tizen.org/privilege/tv.display Public   2.3 This application can check whether a device supports 3D and read information about 3D mode.
http://tizen.org/privilege/tv.inputdevice Public   2.3 This application can capture the key events of an input device, e.g. TV remote control, and release key grabbing.
http://tizen.org/privilege/tv.window Public   2.3 This application can embed the display of a video source, specify the size, and show or hide the embedded display.
http://tizen.org/privilege/volume.set Public   3.0 This application can adjust the volume for different features, such as notification alerts, ringtones, and media.
http://tizen.org/privilege/websetting Public   2.3 This application can change its web application settings, including deleting its cookies.

Table: TV Web W3C/HTML5 API privileges

Privilege Level Privacy Since Description
http://tizen.org/privilege/internet public   2.2.1 The application can access the Internet using the WebSocket, XMLHttpRequest Level 1, and Cross-Origin Resource Sharing APIs.
http://tizen.org/privilege/unlimitedstorage public   2.2.1 The application can use the storage with unlimited size with the Indexed Database API.

Privilege behavior:

  • In the local domain, if this privilege is defined, permission is granted. Otherwise, pop-up user prompt is used.
  • In the remote domain, pop-up user prompt is used.
http://tizen.org/privilege/location public Location 2.2.1 The application can access geographic locations using the Geolocation API.

Privilege behavior:

  • In the local domain, if this privilege is defined, permission is granted. Otherwise, execution is blocked.
  • In the remote domain, if this privilege is defined, pop-up user prompt is used. Otherwise, execution is blocked.