Runtime UI

A user may decide to defer a policy decision, or may want to decide on a policy whenever that permission is actually requested in the app. If a user configures a policy setting to "ask", they will be presented with a prompt when the app requests the specified permission/purpose. The prompt will present the user with three options:

Only this time: Only this time, if selected, will temporarily remember your policy decision for five minutes. Once five minutes are up, the user will be prompted again for their policy decision if the app is still in use.
Always Allow: Always Allow will always allow the data access being prompted. It effectively will change the user's policy setting to be from "ask" to "on".
Always Deny: Always Deny works the same way Always Allow does, except it will deny access to the requested data.

Runtime UIs are a user setting, and thus are enforced with the lowest priority in CMU's policy enforcement algorithm. If a policy profile or quick setting are in effect, a runtime prompt will not be shown.

Go Back