Just about every time you install a new application on your BlackBerry, you're asked to set permissions. Long ago, Research In Motion decided that only the BlackBerry end user would be able to decide how apps would interact with the smartphone. Unlike some other device creators, there are no code signing or other workarounds to granting the permissions. Only the user or the BES administrator can choose to allow permissions.
Without certain permissions, your new app will not run on your BlackBerry. But what permissions should be granted? Should you give Trusted Application status to your newly installed program? Should I give it access to my personal data? These are important questions to ask.
There are three main categories of permissions: Connections, Interactions, and User Data. The Connections permissions deal with how the BlackBerry can communicate to the outside world. USB, Bluetooth, and Wi-fi permissions are all in the category. Interactions cover the permissions an app would need to access the "internals" of the smartphone. Media, recording, and that mysterious "Security Timer Reset" are all included in the category. Finally, the User Data permissions include permission to access email, sms (text) messages, contacts, calendars, and the files on your BlackBerry.
When you first run an application, you'll be prompted to set the permissions to allow the app to interact with your BlackBerry. All permissions have a default setting, but some apps will need more authority than that. You'll be asked whether to grant Trusted Application status and possibly to grant more permissions in a later screen. You should be aware of what you're allowing on your phone and only grant the permissions that you know the app will need.
When an application asks for permissions, it usually doesn't tell you exactly what is needed and/or why. Although there is simple code for explaining why a permission is needed, most developers do not use it. If you're unsure as to why an application needs permission, don't grant it. If it is needed later, the app should prompt you again. If not, you can still change the app's permissions.
Permissions are set individually to each application. To change them, you'll need to edit permissions for your app. Many permissions can be set to Allow, Deny, or Prompt; though some cannot be set to Prompt. Setting a permission to Prompt just means the application will ask you if it's okay to use a resource (such as location data) if and when it needs to.
*Bolded options are the default BlackBerry options
Most apps will ask for Trusted Application status as soon as you first run it. Trusted Applications simply set a variety of permissions to allow, and makes it easier to start using applications that you trust. My recommendation is to avoid doing this. Only applications that you truly trust should be granted this option. Granting this status does nothing more than set some permissions. You can always change it later.
TA Status sets all permissions to Allow except:
While Research in Motion's goal with the BlackBerry OS6 permissions was to make things easier for the user, the end result is additional confusion. In OS Five and previous versions, the user was presented with all of the permissions and asked to set the ones he or she needed to make the application run. In OS6, the user is presented with and asked to enable a category of permissions.
For example, if the application needs to be able to access the Security Timer Reset (which simply allows the app and the BlackBerry to stay active for an extended period of time), the user is asked to grant all permissions in the "Interactions" category. The permissions screen asks the user to grant "Advanced Capabilities." Similarly, if the application needs to access files or the security key store, the user is asked to grant all permissions in the "User Data" category after asking for access to "Personal Information."
The following are my personal recommendations for what permissions to grant applications; this is what I use on my personal BlackBerry. With the App Specific recommendations, the vast majority of applications will work just fine. Some times when an app requests "Personal Information" it simply needs to access files on your BlackBerry. Recently, I had a great deal of trouble getting Google Maps to work with my default settings - the ones listed here. It wasn't until I granted access to the key store (Security Data) and Files (allows app to access and create files on your BlackBerry) that Google Maps actually started to work. Though the app wasn't looking to get a hold of my email and contact information, it still prompted me to access "Personal Information."
Though it takes longer to do, I seriously recommend not granting blanket permissions to an application. It is better to manually tweak the permissions settings and have the app fail a couple of times than to expose your personal information to a unscrupulous app developer. If these default and App Specific selections do not work for your application, consider what the app is to do. An application such as Xobni needs access to your email and organizer data. It can't do its job without it. On the other hand, a flashlight application has no business knowing your email address. If you still remain unsure as to why an app won't work with your desired permissions, contact the developer and find out why your personal information is needed to make the app work.
Permissions give you, the user, ultimate control over how applications will run on your device. Neither Research in Motion nor app developers will be able to decide that for you. Know your applications, and know your app developers. Keep your personal information safe, now that you know just what your new app is trying to do.
Thanks go out to Shao-soft; without their expertise, this article would have been considerably less informative.