Abstract: A method, device, and medium for permission management is disclosed. The method includes obtaining, based on it being detected that an application is being installed, one or more permissions that the application needs to apply for during running, setting, based on the one or more permissions comprising a special permission and based on an installation package of the application not comprising a special permission certificate, the special permission to an unavailable state, and continuing to install the application, where the special permission certificate records a special permission that the application is allowed to apply for during running.

Abstract: Embodiments of this application provide example permission negotiation methods and apparatuses during communication, and electronic devices. An example first electronic device displays an interface of a currently running communication application, and obtains, in response to the first operation, a permission item restricted for use in a process of communication with a second electronic device. Then, the first electronic device sends a first request to the second electronic device that includes the permission item restricted for use. The first electronic device receives confirmation information of the second electronic device for the permission item restricted for use, and restricts, based on the confirmation information, a locally installed application on applying for the permission item restricted for use.