What does --allow-to actually do?

[butteronarchbtw]

Reading tool/src/main/java/pro/javacard/gptool/GPTool.java, the --allow-to flag seems to append the byte sequence 0x82, 0x02, 0x20, 0x20 to the INSTALL [for install and make selectable] command.

Where do these values come from? I am not able to find them in the GPC Card Specification (or at least, they are described as "application specific").

Playing around with values, also yields that sometimes, my card accepts combinations of different values, so i guess figuring out where these values come from on my own is non-trivial.

Where are they actually specified?

[martinpaljak]

It enables extradition to (but not necessarily from) the SSD created. They may be described for example in some card usage documentation, which may or may not be under NDA or otherwise limited. The options --allow-* exist solely as "helper options" to construct installation parameters, which may or may not work with your specific device. If unsure, craft the necessary installation parameters "by hand", according to your device documentation, and pass to GPPro. That probably should also be mentioned more clearly in the wiki.