Abstract: This disclosure describes, in part, a system and process that allows for the automated review of a submitted application to determine the actually requested permissions and identify differences between the requested permissions and a submitted permissions list associated with the application. For example, when an application is submitted for review or approval it may include a submitted permissions list identifying the permissions that are to be associated with the application. In some instances, the permissions included in the submitted permissions list may not correspond with the permissions actually needed for proper operation of the application—there may be omitted permissions that should be included and/or permissions included in the permissions list that are never requested by the application. This disclosure describes, in part, a system and process for confirming that the appropriate permissions are included in the submitted permissions list.