An apparatus configured to control permission to an application, characterized by comprising: a display; and a controller configured to: when requested for an invocation of a first function provided by a framework of an operating system during an execution of the first application, identify restriction information for at least one function restricted for the first application using a user ID and process ID of the first application, determine whether the first function is permitted for the first application based on the identified restriction information, wherein the user ID is assigned to the first application when the first application is installed in the apparatus, and wherein the process ID is assigned to the first application when the first application is executed in the apparatus; if the first function is permission restricted by a user, display a first message indicating that the first function is permission restricted; if the first function is not permission restricted by the user, determine whether the user ID of the first application has obtained permission, if the user ID has obtained permission, execute the first function, and if the user ID has not obtained permission, display a first message (703, 707) indicating that the first function is restricted, wherein the controller is configured to store the restriction information to correspond to the first application when requested to restrict the at least one function for the first application. a display; and a controller configured to: when requested for an invocation of a first function provided by a framework of an operating system during an execution of the first application, identify restriction information for at least one function restricted for the first application using a user ID and process ID of the first application, determine whether the first function is permitted for the first application based on the identified restriction information, wherein the user ID is assigned to the first application when the first application is installed in the apparatus, and wherein the process ID is assigned to the first application when the first application is executed in the apparatus; if the first function is permission restricted by a user, display a first message indicating that the first function is permission restricted; if the first function is not permission restricted by the user, determine whether the user ID of the first application has obtained permission, if the user ID has obtained permission, execute the first function, and if the user ID has not obtained permission, display a first message (703, 707) indicating that the first function is restricted, wherein the controller is configured to store the restriction information to correspond to the first application when requested to restrict the at least one function for the first application. when requested for an invocation of a first function provided by a framework of an operating system during an execution of the first application, identify restriction information for at least one function restricted for the first application using a user ID and process ID of the first application, determine whether the first function is permitted for the first application based on the identified restriction information, wherein the user ID is assigned to the first application when the first application is installed in the apparatus, and wherein the process ID is assigned to the first application when the first application is executed in the apparatus; if the first function is permission restricted by a user, display a first message indicating that the first function is permission restricted; if the first function is not permission restricted by the user, determine whether the user ID of the first application has obtained permission, if the user ID has obtained permission, execute the first function, and if the user ID has not obtained permission, display a first message (703, 707) indicating that the first function is restricted, wherein the controller is configured to store the restriction information to correspond to the first application when requested to restrict the at least one function for the first application.