CODEWITHSUNDEEP
androidandroid-studioandroid-permissions
j2emanue
j2emanue

Reputation: 62519

Android studio - how to find which library is using dangerous permission?

I am trying to upload a apk to the google play store but its saying to my surprise that i am using the following permission: 

Your APK is using permissions that require a privacy policy: (android.permission.RECORD_AUDIO).

so i searched the entire IDE for "android.permission.RECORD_AUDIO" but i cant find it. How can i find out which 3rd party is requesting this ? There should be a way to view in the manifest merger process all the manifest but when i hit shift twice and search manifest only the local manifest are showing up. The other is bit code and i cant view it.

Upvotes: 32

Views: 5194

Answers (3)

yoAlex5
yoAlex5

Reputation: 34255

Android Studio and Permissions

You can use Merged Manifest[About] feature

Open AndroidManifest.xml -> Merged Manifest

Upvotes: 4

cmoaciopm
cmoaciopm

Reputation: 2256

In project build directory, there is a manifest merger report.

In my case, it is located under [ProjectRoot]/app/build/outputs/logs/manifest-merger-debug-report.txt

From this file, your can find where the permission is added. For example:

uses-permission#android.permission.RECORD_AUDIO
ADDED from /home/jack/AndroidProject/ApiDemos/app/src/main/AndroidManifest.xml:45:5-71
    android:name
            ADDED from /home/jack/AndroidProject/ApiDemos/app/src/main/AndroidManifest.xml:45:22-68
uses-permission#android.permission.CAMERA
ADDED from /home/jack/AndroidProject/ApiDemos/app/src/main/AndroidManifest.xml:49:5-65
    android:name
            ADDED from /home/jack/AndroidProject/ApiDemos/app/src/main/AndroidManifest.xml:49:22-62

Upvotes: 74

Umar Hussain
Umar Hussain

Reputation: 3527

If the library is open source you can check their source code for the permissions they have used. They usually list the permission on their Read.me files. Even if they are proprietary libs they will list the permissions they will be using otherwise their security is questionable.

Upvotes: 1

Related Questions