securitypolicy_rp.html

J2ME MIDP2.0 final specification

		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Blanket, No</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 other settings</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 No</p>
		</td>
	</tr>
	<tr>
		<td rowspan="2" width="24%">
			<p style="border: medium none ; padding: 0cm;">
			 Local Connectivity</p>
		</td>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Session</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 Session</p>
		</td>
	</tr>
	<tr>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;"> other
			settings</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Blanket, No</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 other settings</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 Blanket, No</p>
		</td>
	</tr>
	<tr>
		<td rowspan="2" width="24%">
			<p style="border: medium none ; padding: 0cm;">
			 Multimedia recording</p>
		</td>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Session</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 Oneshot</p>
		</td>
	</tr>
	<tr>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;">
			 other settings</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Blanket, No</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 other settings</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 Session, No</p>
		</td>
	</tr>
	<tr>
		<td rowspan="2" width="24%" valign="top">
			<p style="border: medium none ; padding: 0cm;">
			 Read User Data Access</p>
		</td>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Oneshot</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 No</p>
		</td>
	</tr>
	<tr>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;">
			 other settings</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Session, Blanket, No</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 other settings</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 No</p>
		</td>
	</tr>
	<tr>
		<td rowspan="2" width="24%">
			<p style="border: medium none ; padding: 0cm;">
			 Write User Data Access</p>
		</td>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Oneshot 
			</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 default setting</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 Oneshot</p>
		</td>
	</tr>
	<tr>
		<td width="14%">
			<p style="border: medium none ; padding: 0cm;">
			 other settings</p>
		</td>
		<td width="18%">
			<p style="border: medium none ; padding: 0cm;">
			 Session, Blanket, No</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;"> other
			settings</p>
		</td>
		<td width="26%">
			<p style="border: medium none ; padding: 0cm;">
			 No</p>
		</td>
	</tr>
</tbody></table>
<p class="Paragraph">The device MAY enhance and
simplify the user experience by applying a single set of
configuration settings (default or other), not just to a single
MIDlet, but to all MIDlets for a given signer. This option MUST
NOT compromise the function groups and available settings defined in
Table 1. If such an option exists, the user will be prompted to save
the settings and reuse them in future for applications from the same
source. Such a feature MAY also inform the user that a given source
has already been accepted and has an alias to the saved configuration
settings.</p>
<p class="Paragraph">For each trusted or untrusted application, the implementation MAY
read requested permissions from the MIDlet-Permissions and
MIDlet-PermissionsOpt attributes, notify the user which capability
the application requires, and prompt the user to accept or reject
installation of the application. 
</p>
<p class="Paragraph">Note:  For applications in the Third-Party or the Untrusted domain, if any of the groups Net Access,
Messaging, and Local Connectivity has a Blanket permission, neither
Multimedia recording nor Read User Data Access can have a Blanket
permission, and vice versa.  This restriction is to ensure that
a MIDlet cannot activate both network connectivity and
user-privacy-related functions without user consent.<br><br>Similarly,
the Blanket setting for Application Auto Invocation and the Blanket
setting for Net Access are mutually exclusive. This constraint is to
prevent an application from auto-invoking itself, then accessing a
chargeable network without the user being aware.</p>
<p class="Paragraph">In the event that Net Access is
given Blanket permission in any of these combinations of
permissions, it MUST be downgraded to Session permission.</p>
<p class="Paragraph">For each Phone Call and Messaging
action, the implementation MUST present the user with the destination
phone number before the user approves the action. For the Messaging
group, if the implementation maps a single API call to more than one
message (that is, the implementation supports
disassembly/reassembly), the implementation MUST present the user
with the number of messages that will actually be sent out. This
requirement is to ensure that the user always understands the network
costs associated with running the program, whatever API calls are
involved.  </p>
<p align="center">Table 2: Assigning permissions specified in MIDP 2.0
to function groups</p>
<table width="85%" border="1" cellpadding="0" cellspacing="3" align="center">
	<tbody><tr>
		<td colspan="3" width="99%">
			<p align="center" style="border: medium none ; padding: 0cm;">
			<b>MIDP 2.0 </b>&#8211;<b>
			JSR 118</b></p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;">
			<b> Permission</b></p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			<b> Protocol</b></p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			<b> Function group</b></p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;"> javax.microedition.io.Connector.http</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 http</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Net Access</p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;"> javax.microedition.io.Connector.https</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 https</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Net Access</p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;">
			 javax.microedition.io.Connector.datagram</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 datagram</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Net Access</p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;"> javax.microedition.io.Connector.datagramreceiver</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 datagram server (without host)</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Net Access</p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;">
			 javax.microedition.io.Connector.socket</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 socket</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Net Access</p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;">
			 javax.microedition.io.Connector.serversocket</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 server socket (without host)</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Net Access</p>
		</td>
	</tr>
	<tr>
		<td width="67%">
			<p style="border: medium none ; padding: 0cm;"> javax.microedition.io.Connector.ssl</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 ssl</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Net Access</p>
		</td>
	</tr>
	<tr>
		<td width="67%" valign="middle">
			<p style="border: medium none ; padding: 0cm;"> javax.microedition.io.Connector.comm</p>
		</td>
		<td width="13%">
			<p style="border: medium none ; padding: 0cm;">
			 comm</p>
		</td>
		<td width="17%">
			<p style="border: medium none ; padding: 0cm;">
			 Local Connectivity</p>
		</td>
	</tr>
</tbody></table>
<p align="center"> <br>Table 3: Assigning proposed permissions and
API calls specified in the Personal Information Management Package of