Purpose
The purpose of application-level access control is twofold :
- Ensure an application only starts up when a user allows the application to access the announced Qeo topics
- Control that an application only accesses the announced Qeo topics
The manifest File
Manifest file
Every Qeo-enabled application for Android has to specify in a Qeo manifest file on which topics it wants to read and/or write. This is similar to the regular permissions in Android, but now specifically for Qeo. Without this manifest file, your Qeo Android application will not be able to use Qeo.
Behavior
The first time the application starts the user will be presented a dialog where the Topics with their associated permission (read, write or read/write) will be listed. Only if the user accepts this, the application will be granted permission to use Qeo. If the user declines, the app will not be given access to Qeo. Next time the uses tries to start the application, the dialog will be relaunched. Once the user has accepted an application's manifest, he will not be presented with the dialog on subsequent invocations of the application.
Enforcement
The Qeo Service for Android enforces the manifest, i.e. it will not allow a Qeo application to create a reader or writer that was not advertised in its manifest file.
Note
The Manifest is currently only supported on Android devices. Application-level access control and manifest for non-Android devices is under development.
More Information
For more information, go to Creating a Manifest File.