Permissions

Application permissions are granted by the user during application installation. This is done using the app manifest file in order to determine what permissions your application needs. The system application installer uses the permissions key in your manifest file.

If the user did not grant or you did not add all of the required permissions, and your application calls a function that is inside of a namespace that is not yet granted by the user, Ozone triggers a confirmation dialog to the user, asking to grant it temporarily every single time that API is called. Which is bad User Experience.

If the permissions were incomplete during installation, the user can later allow permissions from the default settings app to permanently grant a namespace.

Permission namespaces

Permission namespaces are groups of Ozone APIs that are grouped so that the users can grant multiple permissions of the same kind with a single namespace. For example, the fileGet namespace allows an app to get/read files in multiple ways, including streaming, regular get, list directories etc. If an app only has functionality to show files, namespaces only gives it the ability to read and not to write files.

Namespaces are given as headings in the API table.