For Content Providers, careful consideration must be taken in designing their permissions.
Read and write permissions can be set on Content Providers and any components that require access to the provider should be granted only the permissions that they truly need to perform their jobs.