Review App Permission Risk
Assess a fictional permission set against the app features it claims to provide.
Mission
Assess a fictional permission set against the app features it claims to provide.
Required work
- Map each permission to a claimed feature
- Identify permissions with no clear justification
- Separate runtime permissions from special access
- Recommend a minimum-access configuration
Evidence to produce
A permission decision table classifying required, optional, excessive and special access.
Quality checks
The result must identify its source data, separate observation from assumption, preserve supplied originals, and explain any limitation or uncertain conclusion.