How to Handle Permissions in Flutter: A Comprehensive Guide

Permissions are crucial when building mobile applications that require access to device features such as location, camera, contacts, microphone, storage, and more. And handling permissions effectively ensures that your app provides a seamless user experience while respecting privacy and security requirements.

In Flutter, one of the most popular packages to manage permissions is permission_handler. This article will guide you through how to:

Install and set up permission_handler and fluttertoast
Request and handle different permissions
Understand what each permission does and its use cases
Handling Android and iOS configurations
Implement best practices
Handle testing permissions
Provide expected outcomes and conclusions

1. Prerequisites

Before starting, ensure you have the following:

Flutter SDK installed (version 3.0.0 or higher recommended)
A code editor such as Android Studio or VS Code
Basic understanding of Flutter widgets, async/await in Dart, and state management
A physical device (recommended) or emulator/simulator
Internet connection to install dependencies

2. Installing Dependencies

To get started, add the following to your pubspec.yaml file:

<span class="hljs-attr">dependencies:</span>
  <span class="hljs-attr">permission_handler:</span> <span class="hljs-string">^11.3.1</span>
  <span class="hljs-attr">fluttertoast:</span> <span class="hljs-string">^8.2.4</span>

Then run:

flutter pub get

permission_handler is used to request and check permissions on Android and iOS.
fluttertoast allows you to display messages to users when permissions are granted or denied.

3. Understanding Permission States

When requesting permissions with permission_handler, you can get the following states:

isGranted – The permission is granted.
isDenied – The permission is denied, but can be requested again.
isPermanentlyDenied – The permission is permanently denied, meaning the user must enable it from app settings.
isRestricted – The permission is restricted by the system (common on iOS).
isLimited – Partial access granted (mainly iOS photo library).

4. Reusable Permission Handling Function

Instead of writing multiple functions for each permission, we’ll create a reusable function:

<span class="hljs-keyword">import</span> <span class="hljs-string">'package:permission_handler/permission_handler.dart'</span>;
<span class="hljs-keyword">import</span> <span class="hljs-string">'package:fluttertoast/fluttertoast.dart'</span>;

Future<<span class="hljs-keyword">void</span>> handlePermission(Permission permission, <span class="hljs-built_in">String</span> name) <span class="hljs-keyword">async</span> {
  <span class="hljs-keyword">var</span> status = <span class="hljs-keyword">await</span> permission.request();

  <span class="hljs-keyword">if</span> (status.isGranted) {
    Fluttertoast.showToast(msg: <span class="hljs-string">'<span class="hljs-subst">$name</span> permission granted'</span>);
  } <span class="hljs-keyword">else</span> <span class="hljs-keyword">if</span> (status.isPermanentlyDenied) {
    Fluttertoast.showToast(msg: <span class="hljs-string">'<span class="hljs-subst">$name</span> permission permanently denied. Enable it in settings.'</span>);
    openAppSettings();
  } <span class="hljs-keyword">else</span> <span class="hljs-keyword">if</span> (status.isRestricted) {
    Fluttertoast.showToast(msg: <span class="hljs-string">'<span class="hljs-subst">$name</span> permission restricted by system.'</span>);
  } <span class="hljs-keyword">else</span> <span class="hljs-keyword">if</span> (status.isLimited) {
    Fluttertoast.showToast(msg: <span class="hljs-string">'<span class="hljs-subst">$name</span> permission limited access granted.'</span>);
  } <span class="hljs-keyword">else</span> {
    Fluttertoast.showToast(msg: <span class="hljs-string">'<span class="hljs-subst">$name</span> permission denied'</span>);
  }
}

Usage example:

<span class="hljs-keyword">await</span> handlePermission(Permission.camera, <span class="hljs-string">"Camera"</span>);
<span class="hljs-keyword">await</span> handlePermission(Permission.location, <span class="hljs-string">"Location"</span>);

5. Permissions, Their Use Cases, and Examples

Let’s now look at a bunch of different types of permissions you might have to enable in your Flutter apps. I’ll explain what the permission does and its common use cases as well.

5.1 Calendar Permissions

Permission: calendar, calendarReadOnly, calendarFullAccess
What it does: Accesses the user’s calendar to read or write events.
Use case: Event apps, scheduling apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.calendar, <span class="hljs-string">"Calendar"</span>);

5.2 Camera Permission

Permission: camera
What it does: Access device camera for capturing photos/videos.
Use case: QR scanning, photo apps, video recording.

<span class="hljs-keyword">await</span> handlePermission(Permission.camera, <span class="hljs-string">"Camera"</span>);

5.3 Contacts Permission

Permission: contacts
What it does: Read or modify user contacts.
Use case: Messaging apps, social networking apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.contacts, <span class="hljs-string">"Contacts"</span>);

5.4 Location Permissions

Permission: location, locationAlways, locationWhenInUse
What it does: Access user’s location.
Use case: Navigation apps, ride-hailing apps, geofencing.

<span class="hljs-keyword">await</span> handlePermission(Permission.locationWhenInUse, <span class="hljs-string">"Location"</span>);

5.5 Media Library (iOS only)

Permission: mediaLibrary
What it does: Access media files on iOS devices.
Use case: Photo sharing apps, media editors.

<span class="hljs-keyword">await</span> handlePermission(Permission.mediaLibrary, <span class="hljs-string">"Media Library"</span>);

5.6 Microphone Permission

Permission: microphone
What it does: Record audio.
Use case: Voice notes, video calls, voice commands.

<span class="hljs-keyword">await</span> handlePermission(Permission.microphone, <span class="hljs-string">"Microphone"</span>);

5.7 Phone Permission

Permission: phone
What it does: Access phone state, make calls, read call logs.
Use case: Telephony apps, call management apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.phone, <span class="hljs-string">"Phone"</span>);

5.8 Photos Permissions

Permission: photos, photosAddOnly
What it does: Access or add photos to user library.
Use case: Media apps, social apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.photos, <span class="hljs-string">"Photos"</span>);

5.9 Reminders Permission

Permission: reminders
What it does: Access and manage device reminders.
Use case: To-do apps, productivity apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.reminders, <span class="hljs-string">"Reminders"</span>);

5.10 Sensors Permissions

Permission: sensors, sensorsAlways
What it does: Access device sensors like accelerometer or gyroscope.
Use case: Fitness apps, motion tracking apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.sensors, <span class="hljs-string">"Sensors"</span>);

5.11 SMS Permission

Permission: sms
What it does: Read or send SMS messages.
Use case: OTP verification, messaging apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.sms, <span class="hljs-string">"SMS"</span>);

5.12 Speech Recognition Permission

Permission: speech
What it does: Use speech-to-text features.
Use case: Voice commands, dictation apps.

<span class="hljs-keyword">await</span> handlePermission(Permission.speech, <span class="hljs-string">"Speech Recognition"</span>);

5.13 Storage Permissions

Permission: storage, manageExternalStorage
What it does: Access internal/external storage to read/write files.
Use case: File managers, download managers.

<span class="hljs-keyword">await</span> handlePermission(Permission.storage, <span class="hljs-string">"Storage"</span>);

5.14 Ignore Battery Optimizations

Permission: ignoreBatteryOptimizations
What it does: Request to exclude app from battery optimizations.
Use case: Alarm apps, background services.

<span class="hljs-keyword">await</span> handlePermission(Permission.ignoreBatteryOptimizations, <span class="hljs-string">"Battery Optimizations"</span>);

5.15 Notifications

Permission: notification
What it does: Allow sending notifications.
Use case: Messaging, reminders, alerts.

<span class="hljs-keyword">await</span> handlePermission(Permission.notification, <span class="hljs-string">"Notifications"</span>);

5.16 Bluetooth Permissions

Permission: bluetooth, bluetoothScan, bluetoothAdvertise, bluetoothConnect
What it does: Manage or connect to Bluetooth devices.
Use case: Wearables, IoT devices, headphones.

<span class="hljs-keyword">await</span> handlePermission(Permission.bluetooth, <span class="hljs-string">"Bluetooth"</span>);

5.17 App Tracking Transparency (iOS only)

Permission: appTrackingTransparency
What it does: Request tracking permission for personalized ads.
Use case: Analytics, advertising, user tracking.

<span class="hljs-keyword">await</span> handlePermission(Permission.appTrackingTransparency, <span class="hljs-string">"App Tracking"</span>);

6. Android Manifest Configuration

On Android, all apps must declare the permissions they intend to use in the AndroidManifest.xml file. This acts as the app’s “contract” with the system, letting Android know what sensitive resources (like internet, location, camera) the app might request.

Without declaring these in the manifest, runtime permission requests will fail, even if you’ve added the permission_handler package.

For example, if you try to access the camera without first declaring the camera permission here, your app will crash or fail when requesting it at runtime.

Below is a comprehensive list of common permissions:

<span class="hljs-comment"><!-- Camera access for taking pictures or recording videos --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.CAMERA"</span> /></span>

<span class="hljs-comment"><!-- Read user contacts (e.g., for social features, friend finder) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.READ_CONTACTS"</span> /></span>

<span class="hljs-comment"><!-- Fine-grained location (GPS) for maps, navigation, geofencing --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.ACCESS_FINE_LOCATION"</span> /></span>

<span class="hljs-comment"><!-- Coarse location (network-based, less accurate, uses WiFi/Cell) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.ACCESS_COARSE_LOCATION"</span> /></span>

<span class="hljs-comment"><!-- Record audio from the microphone (e.g., voice notes, calls) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.RECORD_AUDIO"</span> /></span>

<span class="hljs-comment"><!-- Read external storage (access user’s files like images, docs) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.READ_EXTERNAL_STORAGE"</span> /></span>

<span class="hljs-comment"><!-- Write to external storage (save downloaded files, photos) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.WRITE_EXTERNAL_STORAGE"</span> /></span>

<span class="hljs-comment"><!-- Send SMS directly from the app --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.SEND_SMS"</span> /></span>

<span class="hljs-comment"><!-- Receive SMS (read OTP messages for login/verification) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.RECEIVE_SMS"</span> /></span>

<span class="hljs-comment"><!-- Read SMS messages (OTP autofill, chat backup restore) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.READ_SMS"</span> /></span>

<span class="hljs-comment"><!-- Bluetooth usage (connect to Bluetooth devices like headsets, printers) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.BLUETOOTH"</span> /></span>

<span class="hljs-comment"><!-- Bluetooth Admin (manage paired devices, discover nearby devices) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.BLUETOOTH_ADMIN"</span> /></span>

<span class="hljs-comment"><!-- Bluetooth Scan (needed from Android 12+) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.BLUETOOTH_SCAN"</span> /></span>

<span class="hljs-comment"><!-- Bluetooth Connect (needed from Android 12+) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.BLUETOOTH_CONNECT"</span> /></span>

<span class="hljs-comment"><!-- Bluetooth Advertise (for beacon-style apps, Android 12+) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.BLUETOOTH_ADVERTISE"</span> /></span>

<span class="hljs-comment"><!-- Ignore battery optimizations (keep app alive in background tasks) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"</span> /></span>

<span class="hljs-comment"><!-- Internet access (needed for network requests, APIs, file uploads) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.INTERNET"</span> /></span>

<span class="hljs-comment"><!-- Check if a network connection exists (WiFi/Mobile data) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.ACCESS_NETWORK_STATE"</span> /></span>

<span class="hljs-comment"><!-- Access WiFi state (check SSID, connection info, used for network control) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.ACCESS_WIFI_STATE"</span> /></span>

<span class="hljs-comment"><!-- Change WiFi state (enable/disable WiFi programmatically) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.CHANGE_WIFI_STATE"</span> /></span>

<span class="hljs-comment"><!-- Access phone state (read device ID, SIM details, call status) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.READ_PHONE_STATE"</span> /></span>

<span class="hljs-comment"><!-- Make phone calls directly from the app --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.CALL_PHONE"</span> /></span>

<span class="hljs-comment"><!-- Use fingerprint authentication (for biometric login) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.USE_FINGERPRINT"</span> /></span>

<span class="hljs-comment"><!-- Use Biometric authentication (newer than fingerprint, includes face) --></span>
<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.USE_BIOMETRIC"</span> /></span>

7. iOS `Info.plist` Configuration

For iOS, you must provide descriptive keys in the Info.plist file to inform users why your app needs specific permissions. Below are the configurations for each permission example:

Camera Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSCameraUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your camera for taking pictures.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Contacts Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSContactsUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your contacts for better communication.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Location Permissions

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSLocationWhenInUseUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your location to provide location-based services.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSLocationAlwaysUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your location to track your movement even when the app is not active.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Media Library/Storage Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSPhotoLibraryUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your photos for sharing or uploading media.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Microphone Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSMicrophoneUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your microphone for voice recording.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Phone Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSPhoneUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to phone services to enable calls.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Photos Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSPhotoLibraryAddUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need permission to add photos to your library.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Reminders Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSRemindersUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your reminders for task management.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Sensors Permission

 <span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSSensorsUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
 <span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to your sensors for fitness tracking.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

SMS Permission (Handled automatically by iOS if SMS services are requested)
Speech Recognition Permission

<span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSSpeechRecognitionUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
<span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to speech recognition for voice commands.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Ignore Battery Optimizations (Not applicable on iOS)
Notifications Permission

<span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSUserNotificationUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
<span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need permission to send notifications.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Access Media Location Permission (Handled automatically on iOS)
Activity Recognition Permission

<span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSMotionUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
<span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to motion data for fitness tracking.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

Bluetooth Permissions

<span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSBluetoothPeripheralUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
<span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need access to Bluetooth for device connectivity.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

App Tracking Transparency

<span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSUserTrackingUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
<span class="hljs-tag"><<span class="hljs-name">string</span>></span>We need permission to track your activity across apps and websites for personalized ads.<span class="hljs-tag"></<span class="hljs-name">st</span></span>

8. Expected Outcomes

By implementing permissions and connectivity checks this way, your Flutter app will:

Request permissions dynamically at runtime in a user-friendly way.
Handle all possible states gracefully, including granted, denied, permanently denied, restricted, and limited.
Provide users with meaningful feedback, guiding them to settings if necessary.
Maintain compliance with Android and iOS permission policies while ensuring security and transparency.
Listen continuously to network connectivity changes via the global BLoC listener.
Notify users instantly with a toast/snackbar whenever internet status changes (connected/disconnected).
Reduce redundant API calls and improve UX by avoiding “fake” offline or cached-only states.

Best Practices for Handling Permissions in Flutter

There are some common best practices you should follow when handling permissions in Flutter.

1. Request only necessary permissions

Ask only for the permissions your app truly needs. For example, if your app just uploads images, you probably only need storage/photos access, not location, contacts, or SMS.

<span class="hljs-keyword">final</span> status = <span class="hljs-keyword">await</span> Permission.photos.request();
<span class="hljs-keyword">if</span> (status.isGranted) {
  <span class="hljs-comment">// Proceed with photo upload</span>
}

2. Explain why permissions are needed

Always tell the user why you’re asking for a sensitive permission before the system dialog appears. This helps build trust.

Example of a custom dialog before requesting:

Future<<span class="hljs-keyword">void</span>> _showPermissionRationale(BuildContext context) <span class="hljs-keyword">async</span> {
  showDialog(
    context: context,
    builder: (context) => AlertDialog(
      title: Text(<span class="hljs-string">"Camera Access Needed"</span>),
      content: Text(<span class="hljs-string">"We need access to your camera so you can take profile photos."</span>),
      actions: [
        TextButton(
          onPressed: () {
            Navigator.pop(context);
            Permission.camera.request();
          },
          child: Text(<span class="hljs-string">"Allow"</span>),
        ),
        TextButton(
          onPressed: () => Navigator.pop(context),
          child: Text(<span class="hljs-string">"Cancel"</span>),
        ),
      ],
    ),
  );
}

3. Use runtime permission requests

On Android 6.0+ and iOS, permissions must be requested at runtime (not just declared in AndroidManifest.xml or Info.plist).

<span class="hljs-keyword">final</span> status = <span class="hljs-keyword">await</span> Permission.location.request();
<span class="hljs-keyword">if</span> (status.isGranted) {
  <span class="hljs-comment">// Use location</span>
}

4. Handle denial gracefully

Don’t block the entire app when permissions are denied. Provide alternative flows.

For example, instead of forcing camera access:

<span class="hljs-keyword">if</span> (<span class="hljs-keyword">await</span> Permission.camera.isDenied) {
  <span class="hljs-comment">// Offer file upload as fallback</span>
  _pickImageFromGallery();
}

This way, users can still use your app without being forced.

5. Handle permanent denials

When a user selects “Don’t ask again” (Android) or disables a permission in Settings (iOS), you should guide them to Settings.

<span class="hljs-keyword">if</span> (<span class="hljs-keyword">await</span> Permission.camera.isPermanentlyDenied) {
  openAppSettings(); <span class="hljs-comment">// Takes user to app settings</span>
}

UX Example:

Show a snackbar: “Camera access is required. Enable it in Settings.” with a Go to Settings button.

6. Test on both platforms

Permissions behave differently across Android and iOS. Example:

iOS may return limited photo library access.
Android 13+ has new granular media permissions (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO).

Always test all scenarios:

Granted
Denied once
Denied permanently
Limited (iOS only)

7. Follow platform guidelines

Make sure your manifest and Info.plist contain clear explanations.

Info.plist example (iOS):

<span class="hljs-tag"><<span class="hljs-name">key</span>></span>NSCameraUsageDescription<span class="hljs-tag"></<span class="hljs-name">key</span>></span>
<span class="hljs-tag"><<span class="hljs-name">string</span>></span>This app requires camera access to let you take profile pictures.<span class="hljs-tag"></<span class="hljs-name">string</span>></span>

This is required for App Store approval.

8. Avoid over-permissioning

Example: Don’t request SMS if you only need phone number autofill. Users will abandon your app if they see irrelevant requests.

Bad:

<span class="hljs-tag"><<span class="hljs-name">uses-permission</span> <span class="hljs-attr">android:name</span>=<span class="hljs-string">"android.permission.SEND_SMS"</span> /></span>

Just use READ_PHONE_NUMBERS if that’s the actual need.

9. Use a centralized permission manager

Instead of scattering requests across the app, create a PermissionService that handles all requests consistently.

<span class="hljs-class"><span class="hljs-keyword">class</span> <span class="hljs-title">PermissionService</span> </span>{
  Future<<span class="hljs-built_in">bool</span>> requestCamera() <span class="hljs-keyword">async</span> {
    <span class="hljs-keyword">final</span> status = <span class="hljs-keyword">await</span> Permission.camera.request();
    <span class="hljs-keyword">return</span> status.isGranted;
  }

  Future<<span class="hljs-built_in">bool</span>> requestLocation() <span class="hljs-keyword">async</span> {
    <span class="hljs-keyword">final</span> status = <span class="hljs-keyword">await</span> Permission.location.request();
    <span class="hljs-keyword">return</span> status.isGranted;
  }
}

This keeps permission handling uniform.

10. Monitor permission changes

Permissions can change while the app is open (user goes to Settings and disables it). Always check before use.

<span class="hljs-meta">@override</span>
<span class="hljs-keyword">void</span> initState() {
  <span class="hljs-keyword">super</span>.initState();
  Timer.periodic(<span class="hljs-built_in">Duration</span>(seconds: <span class="hljs-number">5</span>), (timer) <span class="hljs-keyword">async</span> {
    <span class="hljs-keyword">final</span> cameraStatus = <span class="hljs-keyword">await</span> Permission.camera.status;
    <span class="hljs-keyword">if</span> (!cameraStatus.isGranted) {
      <span class="hljs-comment">// Disable camera UI</span>
    }
  });
}

Conclusion

Permissions are fundamental for building fully functional and secure mobile applications. Using permission_handler in Flutter allows you to manage permissions across Android and iOS efficiently.

And just remember: always request only necessary permissions, provide clear explanations, and handle all possible states to maintain trust with users.

By combining correct permission logic with proper AndroidManifest and Info.plist setup, you ensure a seamless user experience while staying compliant with platform guidelines.

References

Source: freeCodeCamp Programming Tutorials: Python, JavaScript, Git & MoreÂ