What are the main differences between handling dangerous and safe permissions in security systems?

In the Android security system, there are two types of permissions: dangerous and normal.

• Normal permissions are granted automatically at the time of app installation, as they do not affect user privacy or security. For example, internet access.

• Dangerous permissions require explicit user consent at runtime, as they can impact personal data or device operation. For example, access to the camera, contacts, or location.

Main differences in handling:

1. Permission request:

   • Normal permissions do not require a request during runtime — they are granted automatically.
   • Dangerous permissions need to be requested from the user dynamically, usually through a dialog.

2. Permission check:

   • For dangerous permissions, the app must check if the permission is granted, and if not, request it.

3. Risk management:

   • Dangerous permissions are associated with increased privacy risks, so Android requires explicit user consent.

Example of requesting a dangerous permission in Android (Java):

if (ContextCompat.checkSelfPermission(this, Manifest.permission.CAMERA) != PackageManager.PERMISSION_GRANTED) {
    ActivityCompat.requestPermissions(this, new String[]{Manifest.permission.CAMERA}, REQUEST_CAMERA_PERMISSION);
}

Thus, the main difference lies in the level of control and the need for user interaction for dangerous permissions, unlike normal permissions which are granted automatically.