Internet permission declared but not used?

[t-m-w]

This app's manifest declares that it uses android.permission.INTERNET, but there doesn't appear to be any network functionality. If this permission is intended, it could be helpful to describe what it's for; otherwise, removing it seems reasonable for security- and privacy-conscious users.

[therealbluepandabear]

This app's manifest declares that it uses android.permission.INTERNET, but there doesn't appear to be any network functionality. If this permission is intended, it could be helpful to describe what it's for; otherwise, removing it seems reasonable for security- and privacy-conscious users.

It uses the internet permission for the 'Import Lospec Palette' functionality which uses Volley. To use Volley you must declare android.permission.INTERNET. Other than the 'Import Lospec Palette' functionality, the app doesn't use this permission anywhere else.

I used to write in the README.md file what the permission meant, but I didn't think it was that important as the code is open source.

I do wish android.permission.INTERNET would be a runtime/dangerous permission, but it's not -- and that's out of my control as I do not work for the Android team.

Code: https://github.com/therealbluepandabear/PixaPencil/blob/master/app/src/main/java/com/therealbluepandabear/pixapencil/activities/canvas/onoptionsitemselected/CanvasActivity%2BonImportLospecPaletteOptionsItemSelected.kt

I have converted this into a discussion, so please use discussions for these types of open-ended questions 😉

If you have any other questions/concerns let me know, I take anyone's privacy or security concerns extremely seriously.

[t-m-w]

Thanks for the clarification! I find it helpful for an app's description to explain the use of this permission, particularly when the nature of the app does not make it obvious.

The search terms I clumsily used to try to deduce the need were: download, internet, network, socket, tcp, udp.
After seeing the involved code, I now realize I could/should have used these terms (and ignored/excluded the XML file results): http, https, url, Volley.

Even though the project is open-source, perhaps you can see how an average user might have some trouble finding the reason, unless they take more than a few minutes to dig. Still, even if nothing else changes, it will now be easier for the next person wondering about this to figure it out, as this discussion will come up if they search.

I appreciate the quick response and the fact that you take these questions seriously!

[therealbluepandabear]

I've updated the README.md file to include permission clarification.