starred/ntfy

Fork 0

mirror of https://github.com/binwiederhier/ntfy.git synced 2026-05-09 08:26:00 +02:00

[GH-ISSUE #684] REQUEST_INSTALL_PACKAGES permission #502

New issue

Closed

opened 2026-05-07 00:24:52 +02:00 by BreizhHardware · 7 comments

BreizhHardware commented

2026-05-07 00:24:52 +02:00

Owner

Originally created by @binwiederhier on GitHub (Mar 26, 2023).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/684

I received this question via email:

I was reading about your software ntfy, and I think it's great !
But I was shocked to know that it requires the "REQUEST_INSTALL_PACKAGES" permission. Why ?
I also noticed that the GooglePlay version doesn't need this permission, but the F-Droid version declares it.
Why the difference between the two versions?

Originally created by @binwiederhier on GitHub (Mar 26, 2023). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/684 I received this question via email: > I was reading about your software ntfy, and I think it's great ! But I was shocked to know that it requires the "REQUEST_INSTALL_PACKAGES" permission. Why ? > I also noticed that the GooglePlay version doesn't need this permission, but the F-Droid version declares it. Why the difference between the two versions?

BreizhHardware

2026-05-07 00:24:52 +02:00

closed this issue
added the
question

android-app
labels

BreizhHardware commented

2026-05-07 00:24:52 +02:00

Author

Owner

@binwiederhier commented on GitHub (Mar 26, 2023):

There is a bit more background on it here: https://github.com/binwiederhier/ntfy/issues/531

But the summary is: When you send an .apk file to ntfy as an attachment, Android will not allow you to install the .apk unless the application that downloaded the file has the REQUEST_INSTALL_PACKAGES permission. This applies to trying to install the .apk from ntfy itself, as well as when you try to install it from a file browser. It was wild.

This at least was the case on my device. But when discussing this in Discord it was not everyone's experience.

Honestly I am happy to remove the permission. I don't think many people will miss it.

@binwiederhier commented on GitHub (Mar 26, 2023): There is a bit more background on it here: https://github.com/binwiederhier/ntfy/issues/531 But the summary is: When you send an .apk file to ntfy as an attachment, Android will not allow you to install the .apk unless the application that downloaded the file has the REQUEST_INSTALL_PACKAGES permission. This applies to trying to install the .apk from ntfy itself, as well as when you try to install it from a file browser. It was wild. This at least was the case on my device. But when discussing this in Discord it was not everyone's experience. Honestly I am happy to remove the permission. I don't think many people will miss it.

BreizhHardware commented

2026-05-07 00:24:52 +02:00

Author

Owner

@Quantum-Future commented on GitHub (Mar 30, 2023):

I agree with Google's view explained in #531: "Permission use is not directly related to your app's core purpose".
Why sending an .APK as a ntfy attachment? To make updates?
I don't feel comfortable knowing that an .APK could be installed automatically from within ntfy.
I prefer having this permission removed.
Thank you.

@Quantum-Future commented on GitHub (Mar 30, 2023): I agree with Google's view explained in #531: "Permission use is not directly related to your app's core purpose". Why sending an .APK as a ntfy attachment? To make updates? I don't feel comfortable knowing that an .APK could be installed automatically from within ntfy. I prefer having this permission removed. Thank you.

BreizhHardware commented

2026-05-07 00:24:53 +02:00

Author

Owner

@Quantum-Future commented on GitHub (May 31, 2024):

Hello, the current version (1.16.0) was released on Dec 11, 2022.
Do you have plans for releasing an updated version without this permission and some bugfixes or new features?

@Quantum-Future commented on GitHub (May 31, 2024): Hello, the current version (1.16.0) was released on Dec 11, 2022. Do you have plans for releasing an updated version without this permission and some bugfixes or new features?

BreizhHardware commented

2026-05-07 00:24:53 +02:00

Author

Owner

@Quantum-Future commented on GitHub (Sep 19, 2025):

Honestly I am happy to remove the permission. I don't think many people will miss it.

Hello Phil, please remember this for the next Android release.
Thank you !

@Quantum-Future commented on GitHub (Sep 19, 2025): > Honestly I am happy to remove the permission. I don't think many people will miss it. Hello Phil, please remember this for the next Android release. Thank you !

BreizhHardware commented

2026-05-07 00:24:53 +02:00

Author

Owner

@binwiederhier commented on GitHub (Sep 19, 2025):

Done github.com/binwiederhier/ntfy-android@876d01da00

@binwiederhier commented on GitHub (Sep 19, 2025): Done https://github.com/binwiederhier/ntfy-android/commit/876d01da00fce68e889eaa6e10270eeef0b0b1da

BreizhHardware commented

2026-05-07 00:24:53 +02:00

Author

Owner

@Quantum-Future commented on GitHub (Oct 25, 2025):

Hi, the latest version added to F-Droid on Sept 23 (v1.17.8), still has this permission.

@Quantum-Future commented on GitHub (Oct 25, 2025): Hi, the latest version added to F-Droid on Sept 23 (v1.17.8), still has this permission.

BreizhHardware commented

2026-05-07 00:24:53 +02:00

Author

Owner

@Quantum-Future commented on GitHub (Oct 25, 2025):

Ver 1.17.13 was published today on F-Droid and still declares this permission.

@Quantum-Future commented on GitHub (Oct 25, 2025): Ver 1.17.13 was published today on F-Droid and still declares this permission.

BreizhHardware referenced this issue

2026-05-07 01:01:33 +02:00

[PR #502] [MERGED] Batch message INSERTs #1320