Operating system enhancements to prevent surreptitious access to user data files

A computing device, comprising:

• one or more processors;
• memory;
• a display;
• and
• one or more programs stored in the memory and configured for execution by the one or more processors, the one or more programs comprising instructions for:
• receiving a request from an application to open a data file, the request including a name of the data file and a path to the data file;
• in response to receiving the request:
• determining whether the path corresponds to a designated storage location for user data files;
• determining whether access to the data file has previously been granted for the application;
• in accordance with a determination that (i) the path corresponds to a designated storage location for user data files and (ii) access to the data file has not previously been granted for the application:
• accessing an operating system volition table to determine whether access volition has been asserted, wherein access volition has been asserted when the volition table includes a record for a volition assertion for the data file by the application within a preceding predefined period of time;
• in accordance with a determination that access volition has been asserted, permitting the application to access the data file;
• and
• in accordance with a determination that access volition has not been asserted, displaying a user interface box prompting a user of the computing device to decide whether or not to grant the application access to the data file.

A non-transitory computer readable storage medium storing one or more programs configured for execution by a computing device having one or more processors, memory, and a display, the one or more programs comprising instructions for:

• receiving a request from an application to open a data file, the request including a name of the data file and a path to the data file;
• in response to receiving the request:
• determining whether the path corresponds to a designated storage location for user data files;
• determining whether access to the data file has previously been granted for the application;
• in accordance with a determination that (i) the path corresponds to a designated storage location for user data files and (ii) access to the data file has not previously been granted for the application:
• accessing an operating system volition table to determine whether access volition has been asserted, wherein access volition has been asserted when the volition table includes a record for a volition assertion for the data file by the application within a preceding predefined period of time;
• in accordance with a determination that access volition has been asserted, permitting the application to access the data file;
• and
• in accordance with a determination that access volition has not been asserted, displaying a user interface box prompting a user of the computing device to decide whether or not to grant the application access to the data file.