From: mariasophia@comprehension.com   
      
   Andy Burns wrote:   
   > Maria Sophia wrote:   
   >   
   >> I have 78 or 79, including system apps that have read permission to my   
   >> contacts, although none of them can get even a single contact from me.   
   >>   
   >> How many do you have?   
   >   
   > 17, only 4 of which aren't "stock" apps on a Pixel.   
      
   Hi Andy,   
      
   Thanks for responding, where your numbers are the only numbers (so far)   
   that I think might be reliable since there are *plenty* of system apps   
   which the permissions GUI may not be showing for a variety of reasons which   
   I have explained elsewhere in this thread so I don't need to repeat them.   
      
   The only truthful answer is one that comes out of adb dumpsys, but I do   
   agree that parsing that two-hundred-thousand-line output is problematic.   
      
   Did you get that number from the GUI or from dumpsys?   
      
   If from dumpsys, the easiest way I can think of checking is to grep   
   as findstr is problematic in that in my tests, it reports too much:   
    C:\> adb shell dumpsys package > dump.txt   
    C:\> type dump.txt | findstr "READ_CONTACTS: granted=true"   
      
    C:\> adb shell dumpsys package > dump.txt   
    C:\> type dump.txt | grep "READ_CONTACTS: granted=true" > read.txt   
      
   Many of the outputs in my dumpsys aren't even proper apps, as they're   
    sync adapters   
    account managers   
    Google Play Services modules   
    OEM frameworks   
    emergency services   
    telephony components   
    backup/restore services   
      
   Read.txt is 79 lines long but some apps have multiple similar permissions.   
    C:\> adb shell dumpsys package | grep -c "READ_CONTACTS.*granted=true"   
      
   Sorted uniquely, I only have 11 "types" of contacts read permission.   
    android.permission.READ_CONTACTS: granted=true, flags=[ GRANTED_BY_DEFAULT]   
    android.permission.READ_CONTACTS: granted=true, flags=[ GRANTED   
   BY_DEFAULT|RESTRICTION_SYSTEM_EXEMPT|RESTRICTION_UPGRADE_EXEMPT]   
    android.permission.READ_CONTACTS: granted=true, flags=[ GRANTED   
   BY_DEFAULT|USER_SENSITIVE_WHEN_GRANTED|USER_SENSITIVE_WHEN_DENIED]   
    android.permission.READ_CONTACTS: granted=true, flags=[ REVOKED   
   COMPAT|REVIEW_REQUIRED]   
    android.permission.READ_CONTACTS: granted=true, flags=[ REVOKED   
   COMPAT|REVIEW_REQUIRED|USER_SENSITIVE_WHEN_GRANTED|USER_SENSITIVE_WHEN_DENIED]   
    android.permission.READ_CONTACTS: granted=true, flags=[ SYSTEM_   
   IXED|GRANTED_BY_DEFAULT]   
    android.permission.READ_CONTACTS: granted=true, flags=[ SYSTEM_   
   IXED|GRANTED_BY_DEFAULT|RESTRICTION_SYSTEM_EXEMPT|RESTRICTION_UPGRADE_EXEMPT]   
    android.permission.READ_CONTACTS: granted=true, flags=[ USER_SE   
   SITIVE_WHEN_GRANTED|GRANTED_BY_ROLE]   
    android.permission.READ_CONTACTS: granted=true, flags=[ USER_SE   
   SITIVE_WHEN_GRANTED|USER_SENSITIVE_WHEN_DENIED]   
    android.permission.READ_CONTACTS: granted=true, flags=[ USER_SE   
   SITIVE_WHEN_GRANTED|USER_SENSITIVE_WHEN_DENIED|GRANTED_BY_ROLE]   
    android.permission.READ_CONTACTS: granted=true, flags=[ USER_SE   
   |USER_SENSITIVE_WHEN_GRANTED|USER_SENSITIVE_WHEN_DENIED]   
      
   For example, notice the "system fixed" permission of this line.   
    android.permission.READ_CONTACTS: granted=true, flags=[ SYSTEM_   
   IXED|GRANTED_BY_DEFAULT]   
   It's is system-level package that Android automatically gives access to,   
   and the user cannot revoke it. One question is how many of these exist.   
      
   GRANTED_BY_DEFAULT   
   Android gives this permission automatically to certain system components.   
   We cannot revoke it.   
      
   SYSTEM_FIXED   
   Hard-wired into the OS.   
   We definitely cannot revoke it.   
      
   GRANTED_BY_ROLE   
   Given because the app plays a system role (e.g., Phone, Contacts, Messaging).   
      
   USER_SET   
   We explicitly granted it at some point.   
      
   USER_SENSITIVE_WHEN_GRANTED / WHEN_DENIED   
   Android considers this a sensitive permission and may show it in the GUI.   
      
   REVOKED_COMPAT / REVIEW_REQUIRED   
   Older apps that Android keeps working for compatibility reasons.   
      
   RESTRICTION_SYSTEM_EXEMPT / RESTRICTION_UPGRADE_EXEMPT   
   Privileged packages that bypass certain permission restrictions.   
      
   There may be more types, but those are what I found in my dumpsys.   
      
   But wait, there's more... :)   
      
   Some are not currently granted so there's more than just "true"   
   since it won't show up in the GUI but it "can" be granted later.   
    android.permission.READ_CONTACTS: granted=false, flags=[ USER_S   
   NSITIVE_WHEN_GRANTED]   
      
   So mainly, I need to know if your output is from dupsys   
   or from the GUI since I don't really trust the GUI output.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)