Merge "Stop managed profile owner granting READ_SMS" into qt-dev am: 62044e5099 am: 676cefb0ee am: 539fea38c2 am: e13c6379fb am: e456e2f66e am: fe2c3c269b am: e7253363d2 am: 4e8fadf947 am: 45ee517849

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/15982545

Change-Id: I5a28b7335a19bdea9cfa660cb503e92674ad3a47
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
TreeHugger Robot
2022-10-08 16:09:14 +00:00
committed by Automerger Merge Worker

View File

@@ -12150,6 +12150,15 @@ public class DevicePolicyManager {
* Attempts by the admin to grant these permissions, when the admin is restricted from doing * Attempts by the admin to grant these permissions, when the admin is restricted from doing
* so, will be silently ignored (no exception will be thrown). * so, will be silently ignored (no exception will be thrown).
* *
* Control over the following permissions are restricted for managed profile owners:
* <ul>
* <li>Manifest.permission.READ_SMS</li>
* </ul>
* <p>
* A managed profile owner may not grant these permissions (i.e. call this method with any of
* the permissions listed above and {@code grantState} of
* {@code #PERMISSION_GRANT_STATE_GRANTED}), but may deny them.
*
* @param admin Which profile or device owner this request is associated with. * @param admin Which profile or device owner this request is associated with.
* @param packageName The application to grant or revoke a permission to. * @param packageName The application to grant or revoke a permission to.
* @param permission The permission to grant or revoke. * @param permission The permission to grant or revoke.