Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add a new permission to have access to Gal Provider

Browse Source 
BUG:6897999

Change-Id: Ie60963b7f3911b402b971e794178754e1b4f0a43
This commit is contained in:
Subir Jhanb
2012-08-06 17:19:22 -07:00
committed by Android (Google) Code Review
parent 9951b7c4f0
commit 603af61a7c
2 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
core/java/android/provider/ContactsContract.java
View File

@@ -345,10 +345,10 @@ public final class ContactsContract {
* directory provider URIs by themselves. This level of indirection allows
* Contacts Provider to implement additional system-level features and
* optimizations. Access to Contacts Provider is protected by the
* READ_CONTACTS permission, but access to the directory provider is not.
* Therefore directory providers must reject requests coming from clients
* other than the Contacts Provider itself. An easy way to prevent such
* unauthorized access is to check the name of the calling package:
* READ_CONTACTS permission, but access to the directory provider is protected by
* BIND_DIRECTORY_SEARCH. This permission was introduced at the API level 17, for previous
* platform versions the provider should perform the following check to make sure the call
* is coming from the ContactsProvider:
* <pre>
* private boolean isCallerAllowed() {
* PackageManager pm = getContext().getPackageManager();

7
core/res/AndroidManifest.xml
View File

@@ -278,6 +278,13 @@
android:label="@string/permlab_writeContacts"
android:description="@string/permdesc_writeContacts" />
<!-- Allows an application to execute contacts directory search.
This should only be used by ContactsProvider. -->
<!-- @hide -->
<permission android:name="android.permission.BIND_DIRECTORY_SEARCH"
android:permissionGroup="android.permission-group.PERSONAL_INFO"
android:protectionLevel="signature" />
<!-- Allows an application to read the user's call log. -->
<permission android:name="android.permission.READ_CALL_LOG"
android:permissionGroup="android.permission-group.PERSONAL_INFO"