From adf85dacc139bb04bc80f17f86245ee0323684dd Mon Sep 17 00:00:00 2001
From: Bookatz <bookatz@google.com>
Date: Tue, 13 Aug 2019 11:39:22 -0700
Subject: [PATCH] UserController.switchUser accepts MANAGE_USERS

switchUser used to be permitted provided the caller has MANAGE_USERS
or CREATE_USERS. Recently it was changed to require
INTERACT_ACROSS_USERS_FULL, but that was inappropriate.

Fixes: 138952201
Test: manually verified bug is fixed
Change-Id: I49116859a9a693e657c5002235746ab4cf2cbef2
---
 services/core/java/com/android/server/am/UserController.java | 1 -
 1 file changed, 1 deletion(-)

diff --git a/services/core/java/com/android/server/am/UserController.java b/services/core/java/com/android/server/am/UserController.java
index d4ceb5a869465..98c471f7b6698 100644
--- a/services/core/java/com/android/server/am/UserController.java
+++ b/services/core/java/com/android/server/am/UserController.java
@@ -1342,7 +1342,6 @@ class UserController implements Handler.Callback {
     }
 
     boolean switchUser(final int targetUserId) {
-        checkCallingPermission(INTERACT_ACROSS_USERS_FULL, "switchUser");
         enforceShellRestriction(UserManager.DISALLOW_DEBUGGING_FEATURES, targetUserId);
         int currentUserId = getCurrentUserId();
         UserInfo targetUserInfo = getUserInfo(targetUserId);