From 42c32c0c88e4049a358b0a2bf6e6a5881ee206b8 Mon Sep 17 00:00:00 2001 From: Jeff Sharkey Date: Tue, 18 Feb 2014 14:25:47 -0800 Subject: [PATCH] Lock down MANAGE_DOCUMENTS permission. MANAGE_DOCUMENTS is a very broad permission, since it allows full access to all DocumentsProviders. DocumentsUI should really be the only app holding this permission; everyone else should rely on Uri permission grants for access. Bug: 12958298 Change-Id: I1def48a4ea1814e031fc8513c3cd051d764cd7f8 --- core/res/AndroidManifest.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/res/AndroidManifest.xml b/core/res/AndroidManifest.xml index daff390c93b1c..ca311096c1266 100644 --- a/core/res/AndroidManifest.xml +++ b/core/res/AndroidManifest.xml @@ -1192,7 +1192,7 @@ android:permissionGroup="android.permission-group.STORAGE" android:label="@string/permlab_manageDocs" android:description="@string/permdesc_manageDocs" - android:protectionLevel="signature|system" /> + android:protectionLevel="signature" />