| commit | 3ce6aba4030fbe93a1b5590ee6039f35cdce27b9 | [log] [tgz] |
|---|---|---|
| author | Cassie Wang <cassiewang@google.com> | Fri Jul 16 13:03:19 2021 -0700 |
| committer | Cassie Wang <cassiewang@google.com> | Mon Jul 19 16:17:29 2021 -0700 |
| tree | f958097a9c64ddf0e09bee1fcf8b6676fdc76c17 | |
| parent | 5235bc493d96b7622b5154f7640dc5e30e6d6739 [diff] |
Ensure calling user is the same as requested user. This prevents any cross-user requests. Cross-user requests are already not allowed, but due to a bug elsewhere in the code. This intentionally handles the case and also throws a SecurityException. Bug: 193903221 Test: presubmit Test: manually checked cross-user requests get an exception. Change-Id: I5bd867b86b972452daa2d8253f3c19f059a8a4b3