In a conversation on Twitter yesterday, Daniel Jalkut, of Red Sweater Software, asked whether there was a way to find out what entitlements a sandboxed app has. Brian Webster, of Fat Cat Software, shared the solution. Apparently, this command provides the information:
codesign -dvvv --entitlements - /path/to/app
(Replace "/path/to/app" with the path to the application.)
Mac OS X Hints
http://hints.macworld.com/article.php?story=20120625231307279