[crandles]

I think it would be beneficial for Chrome (Android as well) to allow for an app to have a dynamic set of permissions.

Instead of requiring all web access just so an app can perform an action on any page (when you decide for it to) - what if a specific user action could grant temporary/permanent access to a domain? E.g. Clicking an icon if the app is in the toolbar, or selecting a certain action from a menu.

Chrome has a way to prompt for temporary permissions - but this brings up an alert box, and that is never ideal, it would be nice if the user interaction could be taken for permission.

edit: apparently its in beta (https://news.ycombinator.com/item?id=5383011)

[gizmo686]

Other features I wish Android's security model has are 'soft permissions', and 'pseudo permissions'.

Soft permissions would be where an app can function without permission, but has feature(s) that require it. For example, if I install a game, I should be able to play it without giving it internet access. However, if they want to have a online high-score system they must require that I give them internet access in order to install the app;

Pseudo permissions would be where the app thinks it has permission to use something, but it is really receiving bogus data. For example, say an app 'requires' access to my phones GPS system (when such access is not critical to the function of the app), it would appear to the app that it has access, but the data it receives would not corralate to the actually data.

I think I recall seeing a project to implement both of these features in Android, but I do not recall what it is called.