User guide

"Not permitted", a game that is installed on a smartphone may not be able to send high scores back to a central server
since the game is not permitted to access the Internet.
You can assign application control policies to software configurations so that the BlackBerry Enterprise Server limits the
permitted application behavior to a subset of user accounts that it trusts.
Smartphones revoke the application control policy and reset if the permissions for applications that the application control
policy is applied to become more restrictive. Smartphones permit users to make application permissions more restrictive,
but never less restrictive, than the permissions that you specify.
For more information about configuring application control policies, visit www.blackberry.com/go/serverdocs to see the
BlackBerry Enterprise Server Administration Guide.
Application permissions for applications that users install on a
smartphone
Users can set permissions that control how applications that users install on a BlackBerry smartphone interact with the
other applications on the smartphone. For example, a user can control whether an application that the user installs on the
smartphone can access data or the Internet, make calls, or use Bluetooth connections.
If a user adds an application to the smartphone, the smartphone is designed to prevent the application from sending or
receiving data without the user's knowledge. For a selected application or all your third-party applications, before an
application sends or receives data, you can turn on a prompt that allows you to accept or deny the connection request for a
specific location or resource.
Smartphones permit users to make application permissions more restrictive, but never less restrictive, than the
permissions that you specify.
The following table shows the application permissions and their default settings:
Permission Category Default setting Description
USB Connections Allow A user can set whether applications can
use physical connections, such as a USB
cable, that a user set up for the
smartphone.
Bluetooth Connections Allow A user can set whether applications can
use Bluetooth connections.
Phone Connections Prompt A user can set whether applications can
make calls or access call logs.
Location Data Connections Prompt A user can set whether applications can
use the GPS location information on the
smartphone.
Server Network Connections
• Allow (BlackBerry 7
and later)
A user can set whether applications can
access the Internet or your organization's
intranet using your organization's
network.
Security Technical Overview Controlling applications on a device
163