Hey all, running into an issue here.
Running BES 5.0 and this device is an 8330 Sprint Curve OS 4.5.0.131
Attempting to use Telenav on the device and whenever going to open it, it's stating that Telenav wants to change the permissions and to view.
When go into view, cannot change any of the permissions to allow.
Wiped the device, removed the IT policy, restarted Telenav and was able to use it, but as soon as activated onto the server again, it immediately killed it and rebooted the device and once back up, permissions were un-changeable again.

I know it's the IT Policy that's doing it, but what I am not sure of with BES 5.0, is where I need to be looking to change this.

Any ideas?

Thanks in advance!

Okay...I figured it out...Not sure if this is the correct way to do it or not, but I got it to work...The only bad thing is that it looks as if companies with strict IT policies are going to probably not going to want to do this.
I'll try and be as descriptive as possible as to what I did, and then you experts can pick it apart to see where I may have made some bad choices or why others wouldn't want their companies to do this (this company is pretty laxed when it comes to IT policies so that's why I am letting it run on this server).

1. Log into BES (Duh)
2. Expand "Software" under "BlackBerry Solution Management"
3. Select "Create an Application Control Policy for Unlisted Applications"
4. Give it a name. I chose "TeleNav" since that's the application that I was having issues with (I also realized the Google Maps and Sprint Nav were doing the same thing)
5. I gave it a description also of TeleNav, but of course, you don't need to put anything there.
6. Clicked Save
7. On the next page, clicked "View Application Control Policy List"
8. Clicked on the one named "Telenav"
9. On the next page, clicked on "Edit Application Control Policy".
10. Then clicked on "Access Settings" tab
11. In the list, by default, the following were set:
Prompt User:
Are Internal Network Connections Allowed
Are External Network Connections Allowed
Is access to the Phone API Allowed
Is access to the GPS API Allowed
Disallowed:
Is access to the browser filters API allowed
Is access to the event injector API allowed
Not Permitted:
Is access to the screen, microphone and video capturing APIs allowed
Allowed:
Everything Else

Note: Initially, I just allowed the GPS and Phone API access because I know Telenav requests those off the top of my head, but after going through all of it, I still had issues so I eventually came back and turned them ALL to allow. Maybe a mistake?

12. Changed all to Allow and clicked Save All
13. Once refreshed, I went to BB Solution Management > Software > Applications > Create a Software Confirguration
14. For the name, I put Telenav
15. Description: Telenav
16. Disposition for unlisted applications: Optional
17. Application Control Policy for unlisted applications: Chose "Telenav" in the dropdown box
18. Clicked Save
19. Once refreshed and was on the next page, went to BB Solution Management > User > Manage Users
20. On Manage Users page, left everything blank and chose "Search" at the bottom right.
21. On the next page where it listed the users, clicked on Manage Multiple Users
22. On Manage Multiple Users, chose only 1 user (my test user) and on the bottom right hand side under "Add to user configuration", clicked on "Add Software Configuration"
23. On the next page, selected "Telenav" from the left hand column and pointed it to the right hand column and selected "Save"
24. Once updated, went to "Back to Manage Multiple Users", selected the test user, and resent the IT Policy to the device.

Once the IT policy was received onto the device, went to open Telenav and it went through the "Telenav wants to change permissions", clicked view, everything was set to allow, hit the back button and chose "Save" and was able to use Telenav.
I was also then able to go to Options > Advanced > Applications and go to Google Maps and Sprint Nav and change the permissions to allow, which in turn allowed those applications to work as well.

Did I just do a whole lot of work for nothing? I searched the internet and could not find any resolution to this (watch, someone will post a link right after I post this..hahahaha) other than getting the alx/cod files, and deploying the applications from the BES server, but that would be a complete pain in the ass for apps which you don't have readily available access to those files.

Please discuss away...this is a learning experience for me.

I knew I would be seeing more of this... see my post from a few months back:

BES 5.0 APC for Unlisted Apps / Permissions Issues

A quick update on BES 5.0.2. This update changed a default setting in the Security Policy group. The Allow Resetting of Idle Timer default setting now is at NO. Therefore, even if you have your Application Control policy set up correctly, this will override those settings. You have to make this change in your IT policy for TeleNav to work.

The "best" way to do this is to create a software config for Telenav. That way it doesn't fall into the unlisted ACP. As such, you don't have to open the permissions for unlisted applications.

You can download the BES installers from here:
TeleNav GPS Navigator Download Site for IT Admins