权限策略将限制允许哪些应用程序请求通话记录和短信权限

Permissions policy that will limit which apps are allowed to request Call Log and SMS permissions

今天我收到这样一封邮件,据此我无法再在我的应用程序中使用 RECEIVE_SMS READ_SMS。在我的应用程序中,我使用的是自动读取 OTP。有解决办法吗?

Hello Google Play Developer,

In October, we announced updates to our Permissions policy that will limit which apps are allowed to request Call Log and SMS permissions. This policy will impact one or more of your apps.

Only an app that has been selected as a user's default app for making calls or text messages, or whose core functionality is approved for one of the exception use cases, will be able to request access to Call Log or SMS permissions.

Action required

Below, we've listed apps from your catalog which do not meet the requirements for permission requests. Please remove any disallowed or unused permissions from your app's manifest (specified below), migrate to an alternative implementation (e.g. SMS Retriever API for most cases of OTP verification), or evaluate if your app qualifies for an exception.

Next steps

Read through the Permissions policy and the Play Console Help Center article, which describes intended uses, exceptions, invalid uses, and alternative implementation options for usage of Call Log or SMS permissions.

Update your app or submit a Permissions Declaration Form.

Option 1) If your app does not require access to Call Log or SMS permissions: Make appropriate changes to your app by removing the specified permissions from your app's manifest or migrating to an available alternative implementation by January 9, 2019.

Option 2) If your app is a default handler or you believe your app qualifies for an exception: Please submit a request via the Permissions Declaration Form. You do not need to have implemented APK changes in order to submit a form. Declaration Forms received by January 9, 2019 may be eligible for additional time to make changes to bring their app(s) into compliance. If you have recently submitted a Permissions Declaration Form, we are in the process of reviewing your information and will respond to your application.

Make sure that your app is otherwise compliant with all other Developer Program Policies to prevent your app from being removed.

Alternatively, you can choose to unpublish the app.

Our Developer Program Policies are designed to provide a safe and secure experience for our users while also giving developers the tools they need to succeed. That is why we will remove apps that violate our policies. In cases of repeated or serious violations of our policies, we may also terminate your developer account and any related developer accounts.

We appreciate your willingness to partner with us as we make these improvements to better protect users.

Affected apps

Affected apps and permissions are listed below, up to 20; if you have additional apps, please ensure that they are also compliant with the Permissions policy.

不是你想的那样。转到此 link 并填写并提交 from。如果您的应用程序的默认功能是显示短信收件箱或仅显示 OTP 帐户验证,那么他们不会删除您的应用程序。

这也是一个解决方案..在不提交表单的情况下我们有另一个解决方案..为此我们需要生成应用程序 ID..

SMS Retriever Api

由于安全和隐私问题,

Google 不再允许更多具有 SMS 权限的应用。所以如果你需要Phone没有验证那么

Firebase Auth 是最好的选择。几乎免费

限制:验证码短信50条messages/IPaddress/minute、500条messages/IPaddress/hour

https://firebase.google.com/docs/auth/android/phone-auth

这真是让开发者头疼的新问题 在更新我的应用程序以使用新版本代码播放商店时,我找不到填写权限声明表。 我不再使用短信和通话记录权限,但我仍然无法更新我的应用程序。

我是怎么解决这个问题的,希望对大家有帮助

  • 首先检查您是否有任何 alpha、beta 或任何其他活动的测试轨道。
  • 如果你有那么去神器库看看你有多少活跃的神器。
  • 检查每个权限,如果您在其中任何一个中找到短信或通话记录权限,则说明您发现了问题。
  • 如果可以,请停用轨道。
  • 如果您无法停用它们,请创建具有这些权限的 APK,并将其上传到包含先前在工件库中具有这些权限的 APK 的轨道。
  • 然后你会看到填写权限声明表,当它询问你的应用程序是否遵循 Google 播放商店权限政策然后推出你的应用程序时选择否。
  • 然后在未经许可的情况下对所有活动曲目执行相同操作,这次您可以在声明表中选择是,然后选择您使用这些权限的选项,我之前将其用于 OTP 验证,所以我选择了那个。
  • 更新这些所有轨道后,您需要按照版本代码的递增顺序将您的应用程序一一升级到生产环境,最后只有一个活动的工件轨道,只有生产轨道,现在您只能在该轨道中更新。

希望对大家有所帮助......

根据google "You may only request permissions that are necessary to implement critical current features or services in your application. You may not use permissions that give access to user or device data for undisclosed, unimplemented, or disallowed features or purposes".

Click Here To Read Official Google Permission Doc

如果您的应用需要读取短信以进行基于短信的用户验证/OTP 验证,请使用 SMS Retriever API,它不需要任何短信权限,您的应用仍然可以读取短信以进行 OTP 验证。

如果您的应用程序不使用这些权限,而 third-party 库使用这些权限中的某种类型,请使用下面的代码来避免这些权限。 它可能会影响那些图书馆的顺利运作

 <uses-permission
        android:name="android.permission.RECEIVE_SMS"
        tools:node="remove" />
    <uses-permission
        android:name="android.permission.READ_SMS"
        tools:node="remove" />
    <uses-permission
        android:name="android.permission.SEND_SMS"
        tools:node="remove" />

否则您可以在答案中使用其他方法,例如

SMS Retriever Api