Merge changes from topics "fix3", "fix4" into udc-dev am: 245b979bd0
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/22313343 Change-Id: Ib32ef9388186a12d9c4f423bc04e3b7188138e05 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
@@ -22264,7 +22264,8 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
|
||||
MANAGE_DEVICE_POLICY_INSTALL_UNKNOWN_SOURCES,
|
||||
MANAGE_DEVICE_POLICY_USERS,
|
||||
MANAGE_DEVICE_POLICY_SAFE_BOOT,
|
||||
MANAGE_DEVICE_POLICY_TIME);
|
||||
MANAGE_DEVICE_POLICY_TIME,
|
||||
MANAGE_DEVICE_POLICY_LOCK_CREDENTIALS);
|
||||
private static final List<String> PROFILE_OWNER_OF_ORGANIZATION_OWNED_DEVICE_PERMISSIONS =
|
||||
List.of(
|
||||
MANAGE_DEVICE_POLICY_ACROSS_USERS,
|
||||
@@ -22370,7 +22371,8 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
|
||||
MANAGE_DEVICE_POLICY_PACKAGE_STATE,
|
||||
MANAGE_DEVICE_POLICY_RESET_PASSWORD,
|
||||
MANAGE_DEVICE_POLICY_STATUS_BAR,
|
||||
MANAGE_DEVICE_POLICY_APP_RESTRICTIONS);
|
||||
MANAGE_DEVICE_POLICY_APP_RESTRICTIONS,
|
||||
MANAGE_DEVICE_POLICY_SYSTEM_DIALOGS);
|
||||
private static final List<String> PROFILE_OWNER_PERMISSIONS = List.of(
|
||||
MANAGE_DEVICE_POLICY_ACROSS_USERS_SECURITY_CRITICAL,
|
||||
MANAGE_DEVICE_POLICY_ORGANIZATION_IDENTITY,
|
||||
@@ -22509,8 +22511,6 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
|
||||
MANAGE_DEVICE_POLICY_ACROSS_USERS_FULL);
|
||||
CROSS_USER_PERMISSIONS.put(MANAGE_DEVICE_POLICY_LOCATION,
|
||||
MANAGE_DEVICE_POLICY_ACROSS_USERS_FULL);
|
||||
CROSS_USER_PERMISSIONS.put(MANAGE_DEVICE_POLICY_LOCK_CREDENTIALS,
|
||||
MANAGE_DEVICE_POLICY_ACROSS_USERS_FULL);
|
||||
CROSS_USER_PERMISSIONS.put(MANAGE_DEVICE_POLICY_MICROPHONE,
|
||||
MANAGE_DEVICE_POLICY_ACROSS_USERS);
|
||||
CROSS_USER_PERMISSIONS.put(MANAGE_DEVICE_POLICY_MOBILE_NETWORK,
|
||||
@@ -22665,6 +22665,7 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
|
||||
hasPermissionOnTargetUser = hasPermission(CROSS_USER_PERMISSIONS.get(permission),
|
||||
callerPackageName);
|
||||
}
|
||||
|
||||
return hasPermissionOnOwnUser && hasPermissionOnTargetUser;
|
||||
}
|
||||
|
||||
@@ -22705,7 +22706,7 @@ public class DevicePolicyManagerService extends IDevicePolicyManager.Stub {
|
||||
}
|
||||
// Check the permission for the role-holder
|
||||
if (isCallerDevicePolicyManagementRoleHolder(caller)) {
|
||||
return anyDpcHasPermission(permission, mContext.getUserId());
|
||||
return anyDpcHasPermission(permission, caller.getUserId());
|
||||
}
|
||||
if (DELEGATE_SCOPES.containsKey(permission)) {
|
||||
return isCallerDelegate(caller, DELEGATE_SCOPES.get(permission));
|
||||
|
||||
Reference in New Issue
Block a user