1# Application Permissions 2 3<!--Kit: Ability Kit--> 4<!--Subsystem: Security--> 5<!--Owner: @xia-bubai--> 6<!--SE: @linshuqing; @hehehe-li--> 7<!--TSE: @leiyuqian--> 8 9The way to request permissions varies, depending on its applicable scope and authorization mode. Determine the appropriate way to request permissions based on actual situation. 10 11The system provides the following permissions: 12 13- [Open system_grant permissions](permissions-for-all.md) 14 15 The permissions are available to all applications and granted by the system. The permissions requested by an application are automatically granted when the application is installed. 16 17- [Open user_grant permissions](permissions-for-all-user.md) 18 19 The permissions are available to all applications and granted by the user. The permissions requested by an application must be authorized by the user in a dialog box during the running of the application. 20 21- [Restricted permissions](restricted-permissions.md) 22 23 Restricted permissions are system_basic permission that can be granted to normal applications. 24 25- [Permissions for enterprise applications](permissions-for-enterprise-apps.md) 26 27 The permissions are available only to normal enterprise applications, mobile device management (MDM) applications<!--Del-->, and system applications<!--DelEnd-->. The applications with the distribution type (**app-distribution-type**) of **enterprise_normal** (normal enterprise application) or **enterprise_mdm** (MDM application) can request this type of permissions. When requesting such a permission, you need to determine the authorization mode first. 28 29- [Permissions for MDM applications](permissions-for-mdm-apps.md) 30 31 The permissions are available only to [MDM](../../mdm/mdm-kit-intro.md) applications. When requesting such a permission, you need to determine the authorization mode first. 32 33<!--Del--> 34- [Permissions for system applications](permissions-for-system-apps.md) 35 36 The permissions for system applications are classified into the following types: 37 38 1. [system_grant permissions available to system applications via ACL](permissions-for-system-apps.md): 39 40 The permissions can be requested via [ACL](declare-permissions-in-acl.md). The ACL allows a system application or system service to have permissions beyond its Ability Privilege Level (APL). The requested permissions will be automatically granted when the application is installed. 41 2. [system_grant non-ACL permissions for system applications](permissions-for-system-apps-no-acl.md): 42 43 The permissions cannot be requested via ACL. You need to quey the application's APL and determine whether the application can request the permissions. The requested permissions will be automatically granted when the application is installed. 44 45 3. [user_grant permissions available to system applications via ACL](permissions-for-system-apps-user.md): 46 47 The permissions can be requested via [ACL](declare-permissions-in-acl.md). The ACL allows a system application or system service to have permissions beyond its APL. The permissions requested by an application must be authorized by the user in a dialog box during the running of the application. 48 49<!--DelEnd--> 50