Skip to content

Add per-app permission suggestions and red-flag analysis #27

@cch1rag

Description

@cch1rag

What problem does this solve in your TCC permission workflow?
Raw TCC rows show what permissions exist, but they do not help users interpret whether an app’s permission set looks expected, unusual, or risky. That makes audits harder, especially for less technical users.

What behaviour do you want?
For each app entry, show a suggestion panel with context such as:

  • likely/default permissions for that type of app
  • why an app might reasonably ask for specific permissions
  • obvious red flags, if any
  • a suggested baseline or review recommendation

This could appear inline, in a side panel, or in an expanded row.

Why does this fit a local macOS TCC editor instead of a system tool or third-party service?
Interpreting TCC rows is part of the local review workflow. Adding guidance directly beside each row would make Clearance more useful as an audit tool, as long as the analysis stays grounded in local data.

Scope check
This only fits current scope if implemented without network dependency, using local heuristics, app metadata, and the loaded database.

If this requires cloud AI, remote inference, or telemetry, it would conflict with the current project scope and should be discussed separately first.

Additional context
Examples of useful red flags:

  • an app category that appears inconsistent with requested permissions
  • unusually broad access across multiple sensitive services
  • a path-based client or unknown app identity that cannot be resolved cleanly

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions