86
Security Policy for Protection Domains
The table 24 lists the security policy by function groups for each domain. Under each
domain are the settings allowed for that function within the given domain, while the bolded
setting is the default setting. The Function Group is what will be displayed to the user
when access is requested and when modifying the permissions in the menu. The default
setting is the setting that is effective at the time the MIDlet suite is first invoked and
remains in effect until the user changes it.
Permissions can be implicitly granted or not granted to a MIDlet based on the
configuration of the domain the MIDlet is bound to. Specific permissions cannot be
defined for this closed class. A MIDlet has either been developed or not been developed
to utilize this capability. The other settings are options the user is able to change from the
default setting.
Function
Group
Trusted Third Party
Untrusted
Manufacturer
Operator
Data Network
Ask Once Per App
,
Always Ask, Never
Ask, No Access
Always Ask
, Ask
Once Per App, No
Access
Full Access
Full Access
Messaging
Always Ask
, No
Access
Always Ask
, No
Access
Full Access
Full Access
App Auto-Start
Ask Once Per App
,
Always Ask, Never
Ask, No Access
Ask Once Per App
,
Always Ask, No
Access
Full Access
Full Access
Connectivity
Options
Ask Once Per App
,
Always Ask, Never
Ask, No Access
Ask Once Per App
,
Always Ask, Never
Ask, No Access
Full Access
Full Access
User Data
Read
Capability
Always Ask
, Ask
Once Per App, Never
Ask, No Access
No Access
Full Access
Full Access
User Data
Write
Capability
Always Ask
, Ask
Once Per App, Never
Ask, No Access
No Access
Full Access
Full Access
Multimedia
Recording
Ask Once Per App
,
Always Ask, Never
Ask, No Access
No Access
Full Access
Full Access
Table 24 Security Policy for Protection Domains
The table 25 shows individual permissions assigned to the function groups shown in the
table above.