I think the implication in the post was that the user would be prompted to grant the permission, so they would have to click "Yes" when the spyware asked for permission.