Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

am 603af61a: Add a new permission to have access to Gal Provider BUG:6897999

Browse Source 
* commit '603af61a7cd49f214743b286520419a3fe460774':
  Add a new permission to have access to Gal Provider BUG:6897999
This commit is contained in:
Subir Jhanb
2012-08-08 14:37:42 -07:00
committed by Android Git Automerger
parent c366e19823 603af61a7c
commit 95c29a8bbc
2 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
core/java/android/provider/ContactsContract.java
View File

@@ -345,10 +345,10 @@ public final class ContactsContract {
* directory provider URIs by themselves. This level of indirection allows
* Contacts Provider to implement additional system-level features and
* optimizations. Access to Contacts Provider is protected by the
* READ_CONTACTS permission, but access to the directory provider is not.
* Therefore directory providers must reject requests coming from clients
* other than the Contacts Provider itself. An easy way to prevent such
* unauthorized access is to check the name of the calling package:
* READ_CONTACTS permission, but access to the directory provider is protected by
* BIND_DIRECTORY_SEARCH. This permission was introduced at the API level 17, for previous
* platform versions the provider should perform the following check to make sure the call
* is coming from the ContactsProvider:
* <pre>
* private boolean isCallerAllowed() {
* PackageManager pm = getContext().getPackageManager();

7
core/res/AndroidManifest.xml
View File

@@ -278,6 +278,13 @@
android:label="@string/permlab_writeContacts"
android:description="@string/permdesc_writeContacts" />
<!-- Allows an application to execute contacts directory search.
This should only be used by ContactsProvider. -->
<!-- @hide -->
<permission android:name="android.permission.BIND_DIRECTORY_SEARCH"
android:permissionGroup="android.permission-group.PERSONAL_INFO"
android:protectionLevel="signature" />
<!-- Allows an application to read the user's call log. -->
<permission android:name="android.permission.READ_CALL_LOG"
android:permissionGroup="android.permission-group.PERSONAL_INFO"