Android权限操作之 permission 和 uses-permission_uses-permission 和permission

在用安卓手机的时候，安装软件之后，系统会提示该软件所需要的权限。在我们开发时，如果希望软件能够发短信、打电话，就需要声明短信、电话的调用权限。Android中的权限非常多。

权限相关的四个标签

Android的权限在AndroidManifest.xml文件里配置。AndroidManifest文件中有四个标签与permission有关，它们分别是 <permission>、 <permission-group> 、<permission-tree> 和 <uses-permission>。其中最常用的是 <uses-permission> 和 <permission>，当我们需要获取某个权限的时候就必须在我们的manifest文件中声明<uses-permission>。

大概总结一下，就是 <uses-permission> 标签用来申请一个权限，而 <permission> 标签用来声明、定义一个权限。<permission-group>   <permission-tree> 这两个标签用的相对较少，其中 <permission-group> 用来声明一个权限组，在定义单个具体权限时可以将其分配到指定的权限组中，这样一个权限组就包含了多个具体权限。当申请权限组中一个单个权限成功时，同一个组内的其他权限也会自动获取到，可谓“一荣俱荣”。另外一个标签 <permission-tree> 则是为一组权限声明一个基础的命名空间，相当于一组权限的前缀，是可以用代码动态添加的，而且其名字必须要至少两个 . 符号。

permission

<permission android:description="string resource" <!--描述信息（展示给用户）-->
            android:icon="drawable resource" 
            android:label="string resource" <!--权限的名称（展示给用户）-->
            android:name="string" <!--权限的名称（唯一标示）-->
            android:permissionGroup="string" <!--所属权限组-->
            android:protectionLevel=["normal" | "dangerous" | <!--权限等级-->
                                     "signature" | ...] />

 name 属性必须是唯一的！

此外， protectionLevel 这一属性表示这一权限的等级，不同等级的权限有不同的表现：

• normal: 任何应用都可以申请这一权限，而且在安装时默认授予，不会直接给用户提示
• dangerous：任何应用都可以申请这一权限，但是会给用户提示，在5.0 6.0以后的系统，甚至需要应用动态获取，而无法再安装时一次获取
• signature：只有与声明这一权限的应用使用了相同的私钥签名的应用才可以申请。
• signatureAndSystem：除了满足signature的应用可以申请外，存放在系统目录 /system/app 目录下也可以申请。

uses-permission

<uses-permission android:name="string" <!--权限名称-->
        android:maxSdkVersion="integer" /> <!--权限需要的最大Sdk版本-->

这里的 name 属性所指的便是由 <permission> 标签所声明时使用的 name 属性了。

下面是收集到的 <uses-permission>的资料，方便用的时候查找：

android.permission.ACCESS_CHECKIN_PROPERTIES
允许读写访问”properties”表在checkin数据库中，改值可以修改上传( Allowsread/write access to the “properties” table in the checkin database, to changevalues that get uploaded)

android.permission.ACCESS_COARSE_LOCATION
允许一个程序访问CellID或WiFi热点来获取粗略的位置(Allowsan application to access coarse (e.g., Cell-ID, WiFi) location)

android.permission.ACCESS_FINE_LOCATION
允许一个程序访问精良位置(如GPS) (Allows an application to accessfine (e.g., GPS) location)

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
允许应用程序访问额外的位置提供命令(Allowsan application to access extra location provider commands)

android.permission.ACCESS_MOCK_LOCATION
允许程序创建模拟位置提供用于测试(Allowsan application to create mock location providers for testing)

android.permission.ACCESS_NETWORK_STATE
允许程序访问有关GSM网络信息(Allows applications to accessinformation about networks)

android.permission.ACCESS_SURFACE_FLINGER
允许程序使用SurfaceFlinger底层特性(Allows an application to useSurfaceFlinger's low level features)

android.permission.ACCESS_WIFI_STATE
允许程序访问Wi-Fi网络状态信息(Allows applications to accessinformation about Wi-Fi networks)

android.permission.ADD_SYSTEM_SERVICE
允许程序发布系统级服务(Allowsan application to publish system-level services).

android.permission.BATTERY_STATS
允许程序更新手机电池统计信息(Allowsan application to update the collected battery statistics)

android.permission.BLUETOOTH
允许程序连接到已配对的蓝牙设备(Allowsapplications to connect to paired bluetooth devices)

android.permission.BLUETOOTH_ADMIN
允许程序发现和配对蓝牙设备(Allowsapplications to discover and pair bluetooth devices)

android.permission.BRICK
请求能够禁用设备(非常危险)(Required to be able to disable thedevice (very *erous!).)

android.permission.BROADCAST_PACKAGE_REMOVED
允许程序广播一个提示消息在一个应用程序包已经移除后(Allowsan application to broadcast a notification that an application
package has been removed)

android.permission.BROADCAST_STICKY
允许一个程序广播常用intents(Allowsan application to broadcast sticky intents)

android.permission.CALL_PHONE
允许一个程序初始化一个电话拨号不需通过拨号用户界面需要用户确认(Allowsan application to initiate a phone call without going through the Dialer userinterface for the user to confirm the call being placed.)

android.permission.CALL_PRIVILEGED
允许一个程序拨打任何号码，包含紧急号码无需通过拨号用户界面需要用户确认(Allowsan application to call any phone number, including emergency numbers, withoutgoing through the Dialer user interface for the user to confirm the call beingplaced)

android.permission.CAMERA
请求访问使用照相设备(Requiredto be able to access the camera device. )

android.permission.CHANGE_COMPONENT_ENABLED_STATE
允许一个程序是否改变一个组件或其他的启用或禁用(Allowsan application to change whether an application component (other than its own)is enabled or not. )

android.permission.CHANGE_CONFIGURATION
允许一个程序修改当前设置，如本地化(Allowsan application to modify the current configuration, such as locale. )

android.permission.CHANGE_NETWORK_STATE
允许程序改变网络连接状态(Allowsapplications to change network connectivity state)

android.permission.CHANGE_WIFI_STATE
允许程序改变Wi-Fi连接状态(Allows applications to change Wi-Ficonnectivity state)

android.permission.CLEAR_APP_CACHE
允许一个程序清楚缓存从所有安装的程序在设备中(Allowsan application to clear the caches of all installed applications on the device.)

android.permission.CLEAR_APP_USER_DATA
允许一个程序清除用户设置(Allowsan application to clear user data)

android.permission.CONTROL_LOCATION_UPDATES
允许启用禁止位置更新提示从无线模块(Allowsenabling/disabling location update notifications from the radio. )

android.permission.DELETE_CACHE_FILES
允许程序删除缓存文件(Allowsan application to delete cache files)

android.permission.DELETE_PACKAGES
允许一个程序删除包(Allowsan application to delete packages)

android.permission.DEVICE_POWER
允许访问底层电源管理(Allowslow-level access to power management)

android.permission.DIAGNOSTIC
允许程序RW诊断资源(Allows applications to RW to diagnosticresources. )

android.permission.DISABLE_KEYGUARD
允许程序禁用键盘锁(Allowsapplications to disable the keyguard )

android.permission.DUMP
允许程序返回状态抓取信息从系统服务(Allowsan application to retrieve state dump information from system services.)

android.permission.EXPAND_STATUS_BAR
允许一个程序扩展收缩在状态栏,android开发网提示应该是一个类似Windows Mobile中的托盘程序(Allows an application to expand orcollapse the status bar. )

android.permission.FACTORY_TEST
作为一个工厂测试程序，运行在root用户(Run as a manufacturer test application,running as the root user. )

android.permission.FLASHLIGHT
访问闪光灯,android开发网提示HTC Dream不包含闪光灯(Allowsaccess to the flashlight )

android.permission.FORCE_BACK
允许程序强行一个后退操作是否在顶层activities(Allowsan application to force a BACK operation on whatever is the top activity. )

android.permission.FOTA_UPDATE
暂时不了解这是做什么使用的，android开发网分析可能是一个预留权限.

android.permission.GET_ACCOUNTS
访问一个帐户列表在AccountsService中(Allows access to thelist of accounts in the Accounts Service)

android.permission.GET_PACKAGE_SIZE
允许一个程序获取任何package占用空间容量(Allows an application to find out thespace used by any package. )

android.permission.GET_TASKS
允许一个程序获取信息有关当前或最近运行的任务，一个缩略的任务状态，是否活动等等(Allowsan application to get information about the currently or recently runningtasks: a thumbnail representation of the tasks, what activities are running init, etc.)

android.permission.HARDWARE_TEST
允许访问硬件(Allowsaccess to hardware peripherals. )

android.permission.INJECT_EVENTS
允许一个程序截获用户事件如按键、触摸、轨迹球等等到一个时间流，android开发网提醒算是hook技术吧(Allowsan application to inject user events (keys, touch, trackball) into the eventstream and deliver them to ANY window.)

android.permission.INSTALL_PACKAGES
允许一个程序安装packages(Allowsan application to install packages. )

android.permission.INTERNAL_SYSTEM_WINDOW
允许打开窗口使用系统用户界面(Allowsan application to open windows that are for use by parts of the system userinterface. )

android.permission.INTERNET
允许程序打开网络套接字(Allowsapplications to open network sockets)

android.permission.MANAGE_APP_TOKENS
允许程序管理(创建、催后、 z- order默认向z轴推移)程序引用在窗口管理器中(Allowsan application to manage (create, destroy, Z-order) application tokens in thewindow manager. )

android.permission.MASTER_CLEAR
目前还没有明确的解释，android开发网分析可能是清除一切数据，类似硬格机

android.permission.MODIFY_AUDIO_SETTINGS
允许程序修改全局音频设置(Allowsan application to modify global audio settings)

android.permission.MODIFY_PHONE_STATE
允许修改话机状态，如电源，人机接口等(Allowsmodification of the telephony state – power on, mmi, etc. )

android.permission.MOUNT_UNMOUNT_FILESYSTEMS
允许挂载和反挂载文件系统可移动存储(Allowsmounting and unmounting file systems for removable storage. )

android.permission.PERSISTENT_ACTIVITY
允许一个程序设置他的activities显示(Allow an application to make itsactivities persistent. )

android.permission.PROCESS_OUTGOING_CALLS
允许程序监视、修改有关播出电话(Allowsan application to monitor, modify, or abort outgoing calls)

android.permission.READ_CALENDAR
允许程序读取用户日历数据(Allowsan application to read the user's calendar data.)

android.permission.READ_CONTACTS
允许程序读取用户联系人数据(Allowsan application to read the user's contacts data.)

android.permission.READ_FRAME_BUFFER
允许程序屏幕波或和更多常规的访问帧缓冲数据(Allowsan application to take screen shots and more generally get access to the framebuffer data)

android.permission.READ_INPUT_STATE
允许程序返回当前按键状态(Allowsan application to retrieve the current state of keys and switches. )

android.permission.READ_LOGS
允许程序读取底层系统日志文件(Allowsan application to read the low-level system log files. )

android.permission.READ_OWNER_DATA
允许程序读取所有者数据(Allowsan application to read the owner's data)

android.permission.READ_SMS
允许程序读取短信息(Allowsan application to read SMS messages.)

android.permission.READ_SYNC_SETTINGS
允许程序读取同步设置(Allowsapplications to read the sync settings)

android.permission.READ_SYNC_STATS
允许程序读取同步状态(Allowsapplications to read the sync stats)

android.permission.REBOOT
请求能够重新启动设备(Requiredto be able to reboot the device. )

android.permission.RECEIVE_BOOT_COMPLETED
允许一个程序接收到ACTION_BOOT_COMPLETED广播在系统完成启动(Allowsan application to receive the ACTION_BOOT_COMPLETED that is broadcast after thesystem finishes booting. )

android.permission.RECEIVE_MMS
允许一个程序监控将收到MMS彩信,记录或处理(Allowsan application to monitor incoming MMS messages, to record or performprocessing on them. )

android.permission.RECEIVE_SMS
允许程序监控一个将收到短信息，记录或处理(Allowsan application to monitor incoming SMS messages, to record or performprocessing on them.)

android.permission.RECEIVE_WAP_PUSH
允许程序监控将收到WAPPUSH信息(Allows an applicationto monitor incoming WAP push messages. )

android.permission.RECORD_AUDIO
允许程序录制音频(Allowsan application to record audio)

android.permission.REORDER_TASKS
允许程序改变Z轴排列任务(Allows an application to change theZ-order of tasks)

android.permission.RESTART_PACKAGES
允许程序重新启动其他程序(Allowsan application to restart other applications)

android.permission.SEND_SMS
允许程序发送SMS短信(Allows an application to send SMSmessages)

android.permission.SET_ACTIVITY_WATCHER
允许程序监控或控制activities已经启动全局系统中(Allows an application to watch andcontrol how activities are started globally in the system.)

android.permission.SET_ALWAYS_FINISH
允许程序控制是否活动间接完成在处于后台时(Allowsan application to control whether activities are immediately finished when putin the background.)

android.permission.SET_ANIMATION_SCALE
修改全局信息比例(Modifythe global animation scaling factor.)

android.permission.SET_DEBUG_APP
配置一个程序用于调试(Configurean application for debugging.)

android.permission.SET_ORIENTATION
允许底层访问设置屏幕方向和实际旋转(Allowslow-level access to setting the orientation (actually rotation) of the screen.)

android.permission.SET_PREFERRED_APPLICATIONS
允许一个程序修改列表参数PackageManager.addPackageToPreferred()和PackageManager.removePackageFromPreferred()方法(Allowsan application to modify the list of preferred applications with thePackageManager.addPackageToPreferred() andPackageManager.removePackageFromPreferred() methods.)

android.permission.SET_PROCESS_FOREGROUND
允许程序当前运行程序强行到前台(Allowsan application to force any currently running process to be in the foreground.)

android.permission.SET_PROCESS_LIMIT
允许设置最大的运行进程数量(Allowsan application to set the maximum number of (not needed) application processesthat can be running. )

android.permission.SET_TIME_ZONE
允许程序设置时间区域(Allowsapplications to set the system time zone)

android.permission.SET_WALLPAPER
允许程序设置壁纸(Allowsapplications to set the wallpaper )

android.permission.SET_WALLPAPER_HINTS
允许程序设置壁纸hits(Allowsapplications to set the wallpaper hints)

android.permission.SIGNAL_PERSISTENT_PROCESSES
允许程序请求发送信号到所有显示的进程中(Allowan application to request that a signal be sent to all persistent processes)

android.permission.STATUS_BAR
允许程序打开、关闭或禁用状态栏及图标Allowsan application to open, close, or disable the status bar and its icons.

android.permission.SUBSCRIBED_FEEDS_READ
允许一个程序访问订阅RSSFeed内容提供(Allows an applicationto allow access the subscribed feeds ContentProvider. )

android.permission.SUBSCRIBED_FEEDS_WRITE
系统暂时保留改设置,android开发网认为未来版本会加入该功能。

android.permission.SYSTEM_ALERT_WINDOW
允许一个程序打开窗口使用TYPE_SYSTEM_ALERT，显示在其他所有程序的顶层(Allowsan application to open windows using the type TYPE_SYSTEM_ALERT, shown on topof all other applications. )

android.permission.VIBRATE
允许访问振动设备(Allowsaccess to the vibrator)

android.permission.WAKE_LOCK
允许使用PowerManager的 WakeLocks保持进程在休眠时从屏幕消失(Allows using PowerManager WakeLocks to keep
processor from sleeping or screen fromdimming)

android.permission.WRITE_APN_SETTINGS
允许程序写入API设置(Allows applications to write the apnsettings)

android.permission.WRITE_CALENDAR
允许一个程序写入但不读取用户日历数据(Allowsan application to write (but not read) the user's calendar data. )

android.permission.WRITE_CONTACTS
允许程序写入但不读取用户联系人数据(Allowsan application to write (but not read) the user's contacts data. )

android.permission.WRITE_GSERVICES
允许程序修改Google服务地图(Allows an application to modify theGoogle service map. )

android.permission.WRITE_OWNER_DATA
允许一个程序写入但不读取所有者数据(Allowsan application to write (but not read) the owner's data.)

android.permission.WRITE_SETTINGS
允许程序读取或写入系统设置(Allowsan application to read or write the system settings. )

android.permission.WRITE_SMS
允许程序写短信(Allowsan application to write SMS messages)

android.permission.WRITE_SYNC_SETTINGS
允许程序写入同步设置(Allowsapplications to write the sync settings)

PS：关于AndroidManifest.xml文件相关属性功能可参考在线工具：

Android Manifest功能与权限描述大全：
http://tools.jb51.net/table/AndroidManifest