App Permissions

The permissions field in the app manifest controls the app's access to various sensitive APIs on the device (sometimes called WebAPIs). The permissions are described in the following tables. The three levels of permission, in brief, are:

• Web apps: These only have a basic level of permissions, and don't have access to privileged or internal APIs.
• Privileged apps: These have all the permissions of web apps plus more. Hosted apps can't be privileged — they must be packaged apps.

Hosted app and privileged app permissions

Manifest permission	API name	Minimum app type required	access property	Default granted
alarms	Alarm	hosted	none	Allow
audio-capture	getUserMedia, Web Speech API	hosted for getUserMedia, privileged for Web Speech API	none	Prompt for all installed App types for getUserMedia, Allow for Web Speech API.
audio-channel-alarm	AudioChannels	privileged	none	Allow
audio-channel-content	AudioChannels	hosted	none	Allow
audio-channel-normal	AudioChannels	hosted	none	Allow
audio-channel-notification	AudioChannels	privileged	none	Allow
browser	Browser	privileged	none	Allow
camera	Camera	privileged in KaiOS certified	none	Prompt for all installed App types.`
contacts	Contacts	privileged	readonly, readwrite, readcreate, or createonly	Prompt for all installed App types.
desktop-notification	Notification	hosted	none	Prompt for Web content. Allow for all installed App types.
device-storage:music	Device Storage	privileged	readonly, readwrite, readcreate, or createonly	Prompt
device-storage:pictures	Device Storage	privileged	readonly, readwrite, readcreate, or createonly	Prompt
device-storage:sdcard	Device Storage	privileged	readonly, readwrite, readcreate, or createonly	Prompt
device-storage:videos	Device Storage	privileged	readonly, readwrite, readcreate, or createonly	Prompt
fmradio	FM Radio	hosted	none	Allow
geolocation	Geolocation	hosted	none	Prompt (even for certified Apps)
input	Keyboard	privileged	none	Allow
mobileid	Mobile identity	privileged	none	Prompt
mobilenetwork	Mobile Network	privileged	none	Allow
moz-firefox-accounts	Firefox Accounts	privileged	none	Prompt for all installed App types.
nfc	NFC API	privileged	none	Allow
nfc-share	NFC API	privileged	none	Allow
nfc-read, nfc-write	NFC API	Was certified/internal at this stage in development.	none	Allow
push	Simple Push	hosted	none	Allow
speech-recognition	Web Speech API	privileged	none	Allow
systemXHR	SystemXHR	privileged	none	Allow
tcp-socket	TCP Socket	privileged	none	Allow
video-capture	GetUserMedia	hosted	none	Prompt for all installed App types.

Certified app permissions

Manifest permission	API name	Minimum app type required	access property
attention	Attention Screen	certified	none
audio-channel-ringer	AudioChannels	certified	none
audio-channel-telephony	AudioChannels	certified	none
audio-channel-publicnotification	AudioChannels	certified	none
background-sensors	Background Sensor	certified	none
backgroundservice (Deprecated)	Background Services	certified	none
bluetooth		certified	none
browser:embedded-system-app	Browser	certified	none
camera	Camera	certified	none
cellbroadcast		certified	none
No permission needed, but datastores-access/datastores-owned needs to be set in the manifest (see Data Store API Manifest fields.)	Data Store	certified	datastores-access/ datastores-owned
device-storage:apps	Device Storage	certified	read
embed-apps	Embed Apps	certified	none
idle	Idle	certified	none
mobileconnection	Mobile Connection	certified	none
network-events	Network Events	certified	none
networkstats-manage	Network Stats	certified	none
open-remote-window	Open out-of-process windows	certified	none
permissions	Permissions (Firefox OS)	certified	none
power	Power Management	certified	none
presentation-device-manage	Presentation	certified	none
settings	Settings	certified	readonly or readwrite
sms	WebSMS	certified	none
telephony	Web Telephony	certified	none
time	TimeManager	certified	none
voicemail	Voicemail	certified	none
webapps-manage	Open Webapps	certified	none
wifi-manage	WiFi Management	certified	none
wappush	WAP Push	certified	none