cordova-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Richard B Knoll (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CB-10148) Security Exception when selection contact in Android Marshamallow
Date Mon, 07 Dec 2015 19:45:11 GMT

    [ https://issues.apache.org/jira/browse/CB-10148?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15045570#comment-15045570
] 

Richard B Knoll commented on CB-10148:
--------------------------------------

After looking into this for awhile, I cannot find a way to get around requesting the permission.
Picking the contact with an intent gives us permission to query that contact's lookup URI.
However, we need the entire contact, not just what is returned by that query (which includes
very little useful information). It looks like you can request specific contact information
(phone number, email, etc.) when you send the ACTION_PICK intent by setting the Intent type,
but you can't request all of it at once. Right now we grab it all from the raw contacts table
and that requires READ_CONTACTS. Overall, this is a pretty ridiculous way to do the contact
URI permission granting on Android's part. [~bowserj] am I missing something here?

> Security Exception when selection contact in Android Marshamallow
> -----------------------------------------------------------------
>
>                 Key: CB-10148
>                 URL: https://issues.apache.org/jira/browse/CB-10148
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: Plugin Contacts
>         Environment: Android 6.0.0, cordova-android@5.1.0-dev, cordova-plugin-contacts@2.0.1-dev
>            Reporter: Richard B Knoll
>            Assignee: Richard B Knoll
>            Priority: Critical
>              Labels: android
>
> The contacts plugin does not request the read contacts permission before launching the
contacts picking activity causing a crash. Renders the plugin unusable in cordova-android@5.0.0



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org


Mime
View raw message