Yes, the user is prompted on install. This is actually one of the permissions I look for when I'm installing new apps, given how often it's abused.