AndrOBD icon indicating copy to clipboard operation
AndrOBD copied to clipboard

Asking for too much permissions

Open ieffuie4 opened this issue 7 months ago • 3 comments

Describe the bug

Recent AndrOBD version ask for way too much permissions with no need.

permissions

It sort of ask for "give me access to everything". Pictures, music, full storage. I also do not understand why it ask for Network access. I looked into the different options but was not able to find any functionality that is internet or network based. Is it for the MQTTPublisher addon?

I spend some minutes on a walk thinking what would be best example to show how the permissions should look like. I think i found the two best examples:

First and general: Take a look into the permissions implementations of LibreTube. They work great for a full app with internet access that is downloading things from the internet into the internal memory of the phone.

Second: Take a look into the permissions of OsmAnd. There are (huge) downloads are happening into the internal memory and also addons are available. But the app does not ask you for access to simply the whole memory of the phone like AndrOBD does at the moment.

To Reproduce

Steps to reproduce the behavior:

  1. Open AndrOBD and accepp the permissions
  2. Go to Settings of your phone and look into the permissions AndrOBD asked for

Expected behavior

The minimal permissions that are required to my knowledge for a OBD-Bluetooth-App without internet access are: "Nerby devices" (for Bluetooth) "Sensors" (also somehow Bluetooth related to my understanding)

Some additional that are optional and could make sense for some usecases: "Network" (maybe for MQTT?) "Notifications" (maybe for some other things?)

Those should never be asked for: Files, Music and audio, Photos and videos

Important details on your environment:

  • Android OS version: Android 14
  • AndrOBD version: 2.7.0 and 2.6.12
  • OBD adapter type: not related
  • Connected vehicle make, type, year, engine size: not related

ieffuie4 avatar Jul 17 '24 23:07 ieffuie4