Security Issue | App has access to all pictures without permission | Can someone reproduce this?

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

Page 25 - Extensions, 2-3. Paragraf:

”A system area that supports extensions is called an extension point. Each extension point provides APIs and enforces policies for that area. The system determines which extensions are available based on extension point–specific matching rules. The system automatically launches extension processes as needed and manages their lifetime. Entitlements can be used to restrict extension availability to particular system apps. For example, a Today view widget appears only in Notification Center, and a sharing extension is available only from the Sharing pane. The extension points are Today widgets, Share, Custom actions, Photo Editing, Document Provider, and Custom Keyboard.

Extensions run in their own address space. Communication between the extension and the app from which it was activated uses interprocess communications mediated by the system framework. They don’t have access to each other’s files or memory spaces. Extensions are designed to be isolated from each other, from their containing apps, and from the apps that use them. They are sandboxed like any other third-party app and have a container separate from the containing app’s container. However, they share the same access to privacy controls as the container app. So if a user grants Contacts access to an app, this grant will be extended to the extensions that are embedded within the app, but not to the extensions activated by the app.”

Page 75 - Access to personal data:

“iOS helps prevent apps from accessing a user’s personal information without permission. Additionally, in Settings, users can see which apps they have permitted to access certain information, as well as grant or revoke any future access.”

That’s correct!

The new EU privacy rules are making companies think twice, before potentially breaking new sets of rules. Heavy penalties!

No problem @all! Yes and its a great feature :-)

You may want to read these —

https://www.wired.com/story/app-permissions/

https://www.cultofmac.com/496314/how-apple-made-photos-app-even-more-private-ios-11/