HI All, New to the site so hello all, Ive started security testing on Mobile applications that sit on devices managed by MDM. When I run any security frameworks on internal apps, one of the most popular areas reported back on is about Android permissions and how for example something like 'android.permission.WRITE_EXTERNAL_STORAGE' is a dangerous setting to be allowed. I'm just wondering if this is an internal app and the device itself is managed by MDM, how dangerous is it really? thanks in advance, Pol