1# Open user_grant Permissions 2 3<!--Kit: ArkUI--> 4<!--Subsystem: Security--> 5<!--Owner: @harylee--> 6<!--SE: @linshuqing; @hehehe-li--> 7<!--TSE: @leiyuqian--> 8 9All the permissions in this topic are available to all applications and granted by the user. 10 11This type of permissions must be declared in the application installation package and authorized by the user in a dialog box during the running of the application. The application has the permission only after the user has granted the permission. 12 13<!--Del--> 14> **NOTE** 15> "Enable via ACL" is not involved for permissions of the normal level. 16<!--DelEnd--> 17 18## Request Mode 19 20The [user_grant permissions](app-permission-mgmt-overview.md#user_grant-user-authorization) are permissions granted by users. For details about how to request this type of permissions, see [Declaring Permissions](declare-permissions.md) > [Requesting User Authorization](request-user-authorization.md). 21 22## ohos.permission.ACCESS_BLUETOOTH 23 24Allows an application to access Bluetooth. 25 26This permission enables features such as scanning, discovering, pairing with, and connecting to nearby Bluetooth devices, as well as advertising and scanning for Bluetooth Low Energy devices. 27 28**Permission level**: normal 29 30**Authorization mode**: user_grant 31 32**Valid since**: 10 33 34## ohos.permission.MEDIA_LOCATION 35 36Allows an application to access geographical locations in the user's media file. 37 38**Permission level**: normal 39 40**Authorization mode**: user_grant 41 42**Valid since**: 7 43 44## ohos.permission.APP_TRACKING_CONSENT 45 46Allows an application to read the open anonymous device identifier (OAID). 47 48<!--RP3--><!--RP3End--> 49 50**Permission level**: normal 51 52**Authorization mode**: user_grant 53 54**Valid since**: 9 55 56## ohos.permission.ACTIVITY_MOTION 57 58Allows an application to read the current workout status of the user, such as detecting whether the user is working out and recording the number of steps the user has taken. 59 60For example, to determine whether the user is in motion or to record the number of steps that the user has walked. 61 62**Permission level**: normal 63 64**Authorization mode**: user_grant 65 66**Valid since**: 7 67 68## ohos.permission.CAMERA 69 70Allows an application to use the camera. 71 72**Permission level**: normal 73 74**Authorization mode**: user_grant 75 76**Valid since**: 9 77 78## ohos.permission.DISTRIBUTED_DATASYNC 79 80Allows the application data to be exchanged between devices. 81 82**Permission level**: normal 83 84**Authorization mode**: user_grant 85 86**Valid since**: 7 87 88## ohos.permission.LOCATION_IN_BACKGROUND 89 90Allows an application running in the background to obtain the device location. 91 92For security purposes, this permission cannot be granted to applications in a dialog box. If an application needs this permission, direct the user to manually grant this permission on the **Settings** screen. 93 94**Procedure**: 95 961. [Declare permissions](declare-permissions.md) in the **module.json5** file. 97 98 You must request the foreground location permission before requesting the background permission. Therefore, you must declare both the ohos.permission.LOCATION_IN_BACKGROUND permission and the foreground location permission. The foreground location permissions include the following: 99 - Request [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location). 100 - Request [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location) and [ohos.permission.LOCATION](#ohospermissionlocation). 1012. Request the foreground location permission from the user through a pop-up window. 1023. After the user grants the foreground location permissions, display a message to direct the user to go to the **Settings** screen to grant the ohos.permission.LOCATION_IN_BACKGROUND permission. 1034. The permission is granted to the application if the user selects **Always allow** on the **Settings** screen. 104 105 Paths: 106 <!--RP1--> 107 - Path 1: **Settings** > **Privacy** > **Permission manager** > **Permissions** > **Location** > *Target application* 108 - Path 2: **Settings** > **Privacy** > **Permission manager** > **Apps** > *Target application* > Location 109 <!--RP1End--> 110 111**Permission level**: normal 112 113**Authorization mode**: user_grant 114 115**Valid since**: 7 116 117## ohos.permission.LOCATION 118 119Allows an application to obtain the device location. 120 121**Prerequisites**: This permission must be requested with [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location) together. 122 123**Permission level**: normal 124 125**Authorization mode**: user_grant 126 127**Valid since**: 7 128 129## ohos.permission.APPROXIMATELY_LOCATION 130 131Allows an application to obtain the approximate location information of a device. 132 133**Permission level**: normal 134 135**Authorization mode**: user_grant 136 137**Valid since**: 9 138 139## ohos.permission.MICROPHONE 140 141Allows an application to access the microphone. 142 143**Permission level**: normal 144 145**Authorization mode**: user_grant 146 147**Valid since**: 8 148 149## ohos.permission.READ_CALENDAR 150 151Allows an application to read Calendar data. 152 153**Permission level**: normal 154 155**Authorization mode**: user_grant 156 157**Valid since**: 8 158 159## ohos.permission.WRITE_CALENDAR 160 161Allows an application to add, remove, and modify Calendar events. 162 163**Permission level**: normal 164 165**Authorization mode**: user_grant 166 167**Valid since**: 8 168 169## ohos.permission.READ_HEALTH_DATA 170 171Allows an application to read the health data of the user. 172 173**Permission level**: normal 174 175**Authorization mode**: user_grant 176 177**Valid since**: 7 178 179## ohos.permission.ACCESS_NEARLINK 180 181Allows an application to use NearLink, such as device pairing and connecting to nearby devices. 182 183**Permission level**: normal 184 185**Authorization mode**: user_grant 186 187**Valid since**: 12 188 189## ohos.permission.READ_WRITE_DOWNLOAD_DIRECTORY 190 191Allows an application to access the **Download** directory and its subdirectories in the user directory. 192 193<!--RP2--><!--RP2End--> 194 195**Permission level**: normal 196 197**Authorization mode**: user_grant 198 199**Supported devices**: PCs/2-in-1 devices | tablets 200 201**Valid since**: 11 202 203**Changelog**: The permission level is system_basic in API version 11, and is changed to normal since API version 12. 204 205## ohos.permission.READ_WRITE_DOCUMENTS_DIRECTORY 206 207Allows an application to access the **Documents** directory and its subdirectories in the user directory. 208 209<!--RP2--><!--RP2End--> 210 211**Permission level**: normal 212 213**Authorization mode**: user_grant 214 215**Supported devices**: PCs/2-in-1 devices | tablets 216 217**Valid since**: 11 218 219**Changelog**: The permission level is system_basic in API version 11, and is changed to normal since API version 12. 220 221## ohos.permission.CUSTOM_SCREEN_CAPTURE 222 223Allows an application to capture screen information. 224 225With this permission, the application can perform operations such as taking screenshots. 226 227**Permission level**: normal 228 229**Authorization mode**: user_grant 230 231**Supported devices**: PCs/2-in-1 devices | tablets 232 233**Valid since**: 14 234 235## ohos.permission.READ_MEDIA 236 237Allows an application to read media files from the user's external storage. 238 239**Permission level**: normal 240 241**Authorization mode**: user_grant 242 243**Valid since**: 7 244 245**Deprecated from**: 12 246 247**Substitute**: 248 249See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated). 250 251## ohos.permission.WRITE_MEDIA 252 253Allows an application to read media files from and write media files into the user's external storage. 254 255**Permission level**: normal 256 257**Authorization mode**: user_grant 258 259**Valid since**: 7 260 261**Deprecated from**: 12 262 263**Substitute**: 264 265See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated). 266