Merge "Verify caller before auto granting slice permission" into qt-dev
This commit is contained in:
committed by
Android (Google) Code Review
commit
3d226b76c1
@@ -237,6 +237,8 @@ public class SliceManagerService extends ISliceManager.Stub {
|
||||
if (autoGrantPermissions != null && callingPkg != null) {
|
||||
// Need to own the Uri to call in with permissions to grant.
|
||||
enforceOwner(callingPkg, uri, userId);
|
||||
// b/208232850: Needs to verify caller before granting slice access
|
||||
verifyCaller(callingPkg);
|
||||
for (String perm : autoGrantPermissions) {
|
||||
if (mContext.checkPermission(perm, pid, uid) == PERMISSION_GRANTED) {
|
||||
int providerUser = ContentProvider.getUserIdFromUri(uri, userId);
|
||||
|
||||
Reference in New Issue
Block a user