应该配备正式的流程,其中应包含安全复查,以确定应用程序将被允许使用哪些权限。

• There should be a formal process that includes a security review that determines what permissions an application will be allowed.