Shell doesn't need this permission and it confusing to the user
if visible in Settings.
Test: Shell doesn't appear in Settings under
Settings -> Apps -> Special app access -> Alarms & Reminders ->
3 dot menu -> Show system
Bug: 190775895
Change-Id: I98b051f37f3edf4f616f8847f691b956dafbdd12
Grant shell android.permission.GET_TOP_ACTIVITY_INFO for testing Launcher
tests that need access to AssistContentRequester in shell context.
Bug: 190344718
Test: Local build and flash, ran test
Merged-In: I551e0bee413432653f39c91664d716f695311b6f
Change-Id: I551e0bee413432653f39c91664d716f695311b6f
Grant shell android.permission.GET_TOP_ACTIVITY_INFO for testing Launcher
tests that need access to AssistContentRequester in shell context.
Bug: 190344718
Test: Local build and flash, ran test
Merged-In: I551e0bee413432653f39c91664d716f695311b6f
Change-Id: I551e0bee413432653f39c91664d716f695311b6f
Stop exporting HeapDumpProvider so apps can only access generated dumps
when the user explicitly shares them.
Bug: 184046948
Test: capture system heap dump in developer options and confirm test app
get SecurityException if it tries to access the dump directly, but gets
access when the dump is shared through the notification flow
Change-Id: Ibdca7cde4f563baa39163869289da5b79fc3a6db
This grants the shell app the SUGGEST_EXTERNAL_TIME permission needed
for the TimeManagerTest (CTS) to invoke the
TimeManager.suggestExternalTime() method during tests.
Bug: 184947690
Bug: 177079827
Test: See associated cts change
Merged-In: Ia1995ec9503dbd2b12e0b5b5f92a96e02f85beec
Change-Id: Ia1995ec9503dbd2b12e0b5b5f92a96e02f85beec
This grants the shell app the SUGGEST_EXTERNAL_TIME permission needed
for the TimeManagerTest (CTS) to invoke the
TimeManager.suggestExternalTime() method during tests.
Bug: 184947690
Bug: 177079827
Test: See associated cts change
Merged-In: Ia1995ec9503dbd2b12e0b5b5f92a96e02f85beec
Change-Id: Ia1995ec9503dbd2b12e0b5b5f92a96e02f85beec
Added a new permission INSTALL_TEST_ONLY_PACKAGE
and granted it to shell, this will allow installing
testOnly apps from a testAPI.
Test: N/A
Bug: 183716601
Merged-In: I047a4013fb3462db3487eab2d1635ea75ae29264
Change-Id: I047a4013fb3462db3487eab2d1635ea75ae29264
Added a new permission INSTALL_TEST_ONLY_PACKAGE
and granted it to shell, this will allow installing
testOnly apps from a testAPI.
Test: N/A
Bug: 183716601
Change-Id: I047a4013fb3462db3487eab2d1635ea75ae29264
isForeground is not a good approach to indentify current channel info
And add a permission for tuned info.
Bug: 180482268
Test: atest CtsPermission2TestCases
Test: atest TvInputManagerTest#testGetCurrentTunedInfos
Change-Id: Ib1c1f2da719336ae856684e843b06f8b9b442723
This permission is needed for uwb CTS ranging specific tests.
Is the minimally scoped permission that needs to be added?
- Yes, this only allows the app to range to uwb devices.
What options did you explore that did not need this permission?
- Without this permission, it would be impossible to test the raning
UwbManager API which is protected by UWB_RANGING + UWB_PRIVILEGED.
Bug: 183747097
Test: Compiles
Change-Id: I23fc60a111fd7d868e3982d71ffa354ea9957bfb
The shell *already had* the privileges granted by this permission due to
specific code in netd, and it lost those privileges when it gained the
CHANGE_NETWORK_STATE permission. Explicitly add
CONNECTIVITY_USE_RESTRICTED_NETWORKS so that it can obtain sufficient
permission in netd no matter CHANGE_NETWORK_STATE is set or not.
Remove a duplicate row by the way.
Bug: 185071689
Test: atest NetdClientTest#protectFromVpnTcp6
Change-Id: I64bc321de2c83378ce7bc8d9eb3044ae7772faca
As changing the permission for MediaRouter2 system APIs, this CL
changes the permission in shell accordingly.
The permission was added by ag/13959439.
Bug: 183428114
Test: Passed CTS tests
Change-Id: I3aee256a11db730dd786e69821f3bb8bd590074f
This permission is needed for uwb CTS tests.
Is the minimally scoped permission that needs to be added?
- Yes, this only allows the app to range to uwb devices.
What options did you explore that did not need this permission?
- Without this permission, it would be impossible to test any of the
UwbManager API's.
Bug: 183747097
Test: Compiles
Change-Id: Ie4264cdcd3f84c965da70f8f8fefe538378c47f6
Merged-In: Ie4264cdcd3f84c965da70f8f8fefe538378c47f6
This permission is needed for uwb CTS tests.
Is the minimally scoped permission that needs to be added?
- Yes, this only allows the app to range to uwb devices.
What options did you explore that did not need this permission?
- Without this permission, it would be impossible to test any of the
UwbManager API's.
Bug: 183747097
Test: Compiles
Change-Id: Ie4264cdcd3f84c965da70f8f8fefe538378c47f6
Granted shell the missing normal, dangerous, and
development permissions that can already be granted
to third party apps.
Test: N/A
Bug: 183716601
Merged-In: I11df0d753f830b6ba6ea2222f7d8a7d778161953
Change-Id: I11df0d753f830b6ba6ea2222f7d8a7d778161953
Granted shell the missing normal, dangerous, and
development permissions that can already be granted
to third party apps.
Test: N/A
Bug: 183716601
Change-Id: I11df0d753f830b6ba6ea2222f7d8a7d778161953
This change is part of defining a distinct BLUETOOTH_ADVERTISE
permission to guard the BluetoothLeAdvertiser APIs, since that's a
distinct enough of an operation from SCAN and CONNECT. It'll
continue to be covered under the general "Nearby devices" runtime
permission group.
Bug: 181813006
Test: atest CtsPermission2TestCases
Test: atest CtsPermission3TestCases
Change-Id: I8b62e4d625df1e201f12a73025cd29c431feea79
The activity recognition source may access activity
recognition in its operation as being the activity
recognition source. Accesses from an AR source
(for special tags it designates - the APK may contain
other components) for location and AR are tracked in
a dedicated app op.
bug: 182204957
Test: atest CtsActivityRecognitionTestCases
Change-Id: If29fba1c51d70a2806a0907a73a96d3d8d7a3100
Propagate renounced permissions from context params
to the context attribution source. Throw if one
tries to request at runtime a renounced permission.
Also make the AttributionSource take null for the
setters to ease usage, otherwise folks should always
check for null before calling a builder method.
Additionally, we allow apps that have UPDATE_APP_OPS_STATS
to register arbitrary trusted AttributionSource for
testing. Note that this permission allows abritrary app
op operations, thus we are not relaxing the security
model.
bug: 158792096
Test: atest CtsPermission5TestCases
Change-Id: I4330684bb8695fb998cf31e9363b94ad981ba2cc
Grant MODIFY_AUDIO_ROUTING permissions to the shell identity
for use within CTS tests.
Bug: 183428114
Test: CTS passed with the permission
Change-Id: I6e8c7553d7fe3263c0345adf0fe67340e5afcbe5
For testing a android.media.MediaPlayer.setOnRtpRxNoticeListener
Bug: 169965769
Change-Id: Ifff944ad85592adb3c132c86f123b36b60410643
Test: Built, flashed and booted a device
