Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Stop managed profile owner granting READ_SMS" into sc-dev

Browse Source
This commit is contained in:
Rubin Xu
2021-07-27 08:51:15 +00:00
committed by Android (Google) Code Review
parent 2d5cbc5d2d 7f632dca95
commit 28e4c5d57a
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
core/java/android/app/admin/DevicePolicyManager.java
View File

@@ -10997,6 +10997,16 @@ public class DevicePolicyManager {
* {@link #EXTRA_PROVISIONING_SENSORS_PERMISSION_GRANT_OPT_OUT} in the provisioning parameters. * {@link #EXTRA_PROVISIONING_SENSORS_PERMISSION_GRANT_OPT_OUT} in the provisioning parameters.
* In that case the device owner's control will be limited do denying these permissions. * In that case the device owner's control will be limited do denying these permissions.
* <p> * <p>
* NOTE: On devices running {@link android.os.Build.VERSION_CODES#S} and above, control over
* the following permissions are restricted for managed profile owners:
* <ul>
* <li>Manifest.permission.READ_SMS</li>
* </ul>
* <p>
* A managed profile owner may not grant these permissions (i.e. call this method with any of
* the permissions listed above and {@code grantState} of
* {@code #PERMISSION_GRANT_STATE_GRANTED}), but may deny them.
* <p>
* Attempts by the admin to grant these permissions, when the admin is restricted from doing * Attempts by the admin to grant these permissions, when the admin is restricted from doing
* so, will be silently ignored (no exception will be thrown). * so, will be silently ignored (no exception will be thrown).
* *