diff --git a/api/current.txt b/api/current.txt index 565faac8922f7..05883b45c6afc 100644 --- a/api/current.txt +++ b/api/current.txt @@ -5789,6 +5789,7 @@ package android.app.admin { method public void clearCrossProfileIntentFilters(android.content.ComponentName); method public void clearDeviceOwnerApp(java.lang.String); method public void clearPackagePersistentPreferredActivities(android.content.ComponentName, java.lang.String); + method public void clearProfileOwner(android.content.ComponentName); method public void clearUserRestriction(android.content.ComponentName, java.lang.String); method public deprecated android.os.UserHandle createAndInitializeUser(android.content.ComponentName, java.lang.String, java.lang.String, android.content.ComponentName, android.os.Bundle); method public android.os.UserHandle createAndManageUser(android.content.ComponentName, java.lang.String, android.content.ComponentName, android.os.PersistableBundle, int); diff --git a/api/test-current.txt b/api/test-current.txt index dcc00addebfec..792d0969cb307 100644 --- a/api/test-current.txt +++ b/api/test-current.txt @@ -5791,6 +5791,7 @@ package android.app.admin { method public void clearCrossProfileIntentFilters(android.content.ComponentName); method public void clearDeviceOwnerApp(java.lang.String); method public void clearPackagePersistentPreferredActivities(android.content.ComponentName, java.lang.String); + method public void clearProfileOwner(android.content.ComponentName); method public void clearUserRestriction(android.content.ComponentName, java.lang.String); method public deprecated android.os.UserHandle createAndInitializeUser(android.content.ComponentName, java.lang.String, java.lang.String, android.content.ComponentName, android.os.Bundle); method public android.os.UserHandle createAndManageUser(android.content.ComponentName, java.lang.String, android.content.ComponentName, android.os.PersistableBundle, int); diff --git a/core/java/android/app/admin/DevicePolicyManager.java b/core/java/android/app/admin/DevicePolicyManager.java index 768da6a411366..fef2a0e608062 100644 --- a/core/java/android/app/admin/DevicePolicyManager.java +++ b/core/java/android/app/admin/DevicePolicyManager.java @@ -3244,15 +3244,14 @@ public class DevicePolicyManager { } /** - * @hide * Clears the active profile owner and removes all user restrictions. The caller must * be from the same package as the active profile owner for this user, otherwise a * SecurityException will be thrown. * + *

This doesn't work for managed profile owners. + * * @param admin The component to remove as the profile owner. - * @return */ - @SystemApi public void clearProfileOwner(@NonNull ComponentName admin) { if (mService != null) { try { diff --git a/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java b/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java index fe62d15963659..4bda7d9a6cdf3 100644 --- a/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java +++ b/services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java @@ -5423,7 +5423,9 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub { if (!mHasFeature) { return; } - UserHandle callingUser = mInjector.binderGetCallingUserHandle(); + final UserHandle callingUser = mInjector.binderGetCallingUserHandle(); + final int userId = callingUser.getIdentifier(); + enforceNotManagedProfile(userId, "clear profile owner"); // Check if this is the profile owner who is calling final ActiveAdmin admin = getActiveAdminForCallerLocked(who, DeviceAdminInfo.USES_POLICY_PROFILE_OWNER); @@ -5431,7 +5433,6 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub { admin.disableCamera = false; admin.userRestrictions = null; clearUserPoliciesLocked(callingUser); - final int userId = callingUser.getIdentifier(); mOwners.removeProfileOwner(userId); mOwners.writeProfileOwner(userId); }