Merge "[SettingsProvider] enforce permission on openFile" into tm-dev

2022-04-28 16:00:04 +00:00
parent 8ed3ef0fab 5b50cebd18
commit 0cb62fa9c7
1 changed files with 3 additions and 0 deletions
--- a/packages/SettingsProvider/src/com/android/providers/settings/SettingsProvider.java
+++ b/packages/SettingsProvider/src/com/android/providers/settings/SettingsProvider.java
@@ -818,6 +818,9 @@ public class SettingsProvider extends ContentProvider {
            getContext().enforceCallingPermission(Manifest.permission.INTERACT_ACROSS_USERS,
                    "Access files from the settings of another user");
        }
+        if (mode.contains("w")) {
+            enforceWritePermission(Manifest.permission.WRITE_SETTINGS);
+        }
        uri = ContentProvider.getUriWithoutUserId(uri);

        final String cacheRingtoneSetting;