1. A computer-implemented method, comprising: presenting to a user one or more user-level permissions in a user understandable language or mode of expression, the one or more user-level permissions representing one or more application-level permissions requested from an application for accessing one or more resources; generating a security profile having one or more operating system (OS)-level permissions based on at least one of the user-level permissions authorized by the user; and enforcing the security profile to restrict the application to accessing the one or more resources based on the OS-level permissions.