Honorlock Extension Permissions and Functions

Permissions & Functions of the Honorlock Extension

1. Read and change all your data on all websites.  The Honorlock extension has access to all websites to: 
   • Proctor third-party exams since Honorlock does not know the URL of the third party.
   • Block websites that are not allowed during an exam only if the BrowserGuard^TM is toggled on or the Allowed URLs toggle is enabled. 
   • Identify enabled exam URLs.  If one is not found, the extension does nothing.  When found, test takers are provided prompts to agree to terms of use, and grant permissions to the proctoring settings selected by the exam administrator. 
2. Read and change browsing history on all signed-in devices. This permission prevents unauthorized access to exam content via the back button.
3. Capture content of the test taker's screen. The Honorlock extension will only record the test taker's screen if the "Screen Record" toggle is enabled. If enabled, Screen Recording is only active when a test taker is taking an exam and after Honorlock has been given permission during the pre-exam authentication steps.
   • Screen recordings are utilized by exam administrators to review sessions.  Screen recordings are also utilized by Honorlock proctors if an institution or organization utilizes the Live Pop-in or Record & Review levels of service.
   • Honorlock cannot record the desktop without explicit consent from the user each time exam recording is initialized. 
4. Change settings that control website access to features such as cookies, JavaScript, plugins, geolocation, microphone, camera, etc...  This allows the Honorlock extension to read the current status of the device's settings, specifically in regards to JavaScript, plugins, microphone, and camera.  Honorlock does not utilize geolocation via the extension.  Honorlock stores a user's IP address to approximate the location. 
5. Manage your apps, extensions, and themes.  This permission is utilized to protect against the use of unauthorized extensions during the exam.  Honorlock can disable extensions after consent from the user for the duration of the exam.  Honorlock does not re-enable the extensions when the exam is completed and closed. 

Permissions Details

1. Chrome.management - This permission is used to query extensions installed on the test taker’s device, in addition to disabling unauthorized extensions after consent.
2. Chrome.tabs - This permission is used to close already open tabs or block new tabs if the BrowswerGuard or Allowed URL toggle is enabled.  This will prevent the test taker from opening a website on their computer to look up answers to the exam. 
3. Chrome.webNavigation - This permission is used to detect and prevent users from accessing disallowed websites if the BrowserGuard toggle or Allowed URL toggle is enabled.  This permission is also used to make sure the proctoring window is not closed for the duration of the exam. 
4. Chrome.scripting - This is a generally used permission to inject actions into the user’s browser.  Actions vary from blocking copy/paste to reading LMS on-page variables. 
5. Chrome.history - This permission is used to clear the test taker's exam tab history after exam submission.  this function requires a time and date range and is limited only to browsing history during the exam. 
6. Chrome.storage - This permission is used to save and track the proctoring settings and activities for the duration of the exam.  Honorlock cannot access system storage.  Chrome only allows access to the internal storage of the Chrome extension. 
7. Chrome.desktop.Capture - this permission is used to initialize the desktop recording during an exam. 
8. Chrome.contentSettings - This permission is used to detect what permission a user has given within their browser.  
   • Cookie access  - to detect if Cookies are enabled
   • JavaScript - to determine if JavaScript is enabled
   • Enable plug-ins to detect if plug-ins are enabled
   • Microphone - to detect if the microphone is enabled
   • Note: This allows Honorlock to present the in-exam webcam only after we have been given permission via the authentication steps.  The only feature Honorlock uses from this permission is webcam settings.
9. Chrome.system.display - This permission is used to detect window resizing to ensure a student is only looking at their exam window.  This function only applies when BrowserGuard^TM is toggled on for an exam. 

Test takers are not obligated to keep the Honorlock extension installed after taking an exam and are welcome to uninstall it at their preference.