Merge "UwbServiceImpl: Use cleanCallingIdentity to perform permission checks" into sc-dev am: c519e91ecc

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/14749736

Change-Id: Id90cb39de5074b94560366e2108e54cac44f156b

services/uwb/java/com/android/server/uwb/UwbServiceImpl.java

@@ -19,6 +19,7 @@ package com.android.server.uwb;
 import android.annotation.NonNull;
 import android.content.AttributionSource;
 import android.content.Context;
+import android.os.Binder;
 import android.os.IBinder;
 import android.os.PersistableBundle;
 import android.os.RemoteException;
@@ -171,8 +172,10 @@ public class UwbServiceImpl extends IUwbAdapter.Stub implements IBinder.DeathRec
                 RangingReport rangingReport)
                 throws RemoteException {
             if (!mIsValid) return;
-            if (!mUwbInjector.checkUwbRangingPermissionForDataDelivery(
-                    mAttributionSource, "uwb ranging result")) {
+            boolean permissionGranted = Binder.withCleanCallingIdentity(
+                    () -> mUwbInjector.checkUwbRangingPermissionForDataDelivery(
+                            mAttributionSource, "uwb ranging result"));
+            if (!permissionGranted) {
                 Log.e(TAG, "Not delivering ranging result because of permission denial"
                         + mSessionHandle);
                 return;