They used to. It is like they went backwards. Here is the text from their blog post in 2015.
Registry Permissions
Roku provides a mechanism for managing permissions for registry keys. An application can specify that a given registry key should have read and/or write permissions granted to one or more other applications or components.
To manage registry permissions, an application should follow these steps:
- Create an instance of the roRegistry object.
- Call the grantPermission() method on the roRegistry object to grant a permission to a registry key. The grantPermission() method takes two arguments: the permission name (either "read" or "write"), and the name of the registry key that should have the permission granted. The registry key name should be specified in the format "pkg:/path/to/key".
- To revoke a permission, call the revokePermission() method on the roRegistry object. The revokePermission() method takes the same two arguments as the grantPermission() method.
Note that permissions are granted on a per-application basis. To grant a permission to a component library, you should grant the permission to the package ID of the library (which can be obtained using the pkgId field of the roAssociativeArray returned by the GetManifest() method of the component library).
