AndrOBD
AndrOBD copied to clipboard
Asking for too much permissions
Describe the bug
Recent AndrOBD version ask for way too much permissions with no need.
It sort of ask for "give me access to everything". Pictures, music, full storage. I also do not understand why it ask for Network access. I looked into the different options but was not able to find any functionality that is internet or network based. Is it for the MQTTPublisher addon?
I spend some minutes on a walk thinking what would be best example to show how the permissions should look like. I think i found the two best examples:
First and general: Take a look into the permissions implementations of LibreTube. They work great for a full app with internet access that is downloading things from the internet into the internal memory of the phone.
Second: Take a look into the permissions of OsmAnd. There are (huge) downloads are happening into the internal memory and also addons are available. But the app does not ask you for access to simply the whole memory of the phone like AndrOBD does at the moment.
To Reproduce
Steps to reproduce the behavior:
- Open AndrOBD and accepp the permissions
- Go to Settings of your phone and look into the permissions AndrOBD asked for
Expected behavior
The minimal permissions that are required to my knowledge for a OBD-Bluetooth-App without internet access are: "Nerby devices" (for Bluetooth) "Sensors" (also somehow Bluetooth related to my understanding)
Some additional that are optional and could make sense for some usecases: "Network" (maybe for MQTT?) "Notifications" (maybe for some other things?)
Those should never be asked for: Files, Music and audio, Photos and videos
Important details on your environment:
- Android OS version: Android 14
- AndrOBD version: 2.7.0 and 2.6.12
- OBD adapter type: not related
- Connected vehicle make, type, year, engine size: not related