Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

am 5d122d96: Better documentation on permission checking in ContentProvider.call().

Browse Source 
* commit '5d122d96a5bf3bbaccaca2765b45716efe7ee2ef':
  Better documentation on permission checking in ContentProvider.call().
This commit is contained in:
Dianne Hackborn
2013-03-13 22:51:19 +00:00
committed by Android Git Automerger
parent 1b11e4bdd2 5d122d96a5
commit f1ebd1bd67
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
core/java/android/content/ContentProvider.java
View File

@@ -1256,6 +1256,13 @@ public abstract class ContentProvider implements ComponentCallbacks2 {
* interfaces that are cheaper and/or unnatural for a table-like
* model.
*
* <p class="note"><strong>WARNING:</strong> The framework does no permission checking
* on this entry into the content provider besides the basic ability for the application
* to get access to the provider at all. For example, it has no idea whether the call
* being executed may read or write data in the provider, so can't enforce those
* individual permissions. Any implementation of this method <strong>must</strong>
* do its own permission checks on incoming calls to make sure they are allowed.</p>
*
* @param method method name to call. Opaque to framework, but should not be {@code null}.
* @param arg provider-defined String argument. May be {@code null}.
* @param extras provider-defined Bundle argument. May be {@code null}.