commit 6dc428f677f2b80b085466961e9495972e1c88c9
author Tony Mak <tonymak@google.com> Mon Oct 10 15:48:27 2016 +0100
committer Tony Mak <tonymak@google.com> Tue Oct 11 12:46:32 2016 +0000
tree d454419317adddd86d21b1e4dd92a194b2d47d89
parent 7e98d9e249caaefa3343e9c10d864bdfaa411d95

Allow device owner to inflate managed profile

1. Modify DPM.isProvisioningAllowed to allow it to happen
2. Introduce hidden API createProfileForUserEvenWhenDisallowed for
   ManagedProvisioning app to create profile under DO.
   Apps with MANAGE_USERS permission can clear the
   DISALLOW_ADD_USER restriction anyway, so they do not gain extra power.

Test: runtest -x frameworks/base/services/tests/servicestests/src/com/android/server/pm/UserManagerTest.java
Test: cts-tradefed run cts --module DevicePolicyManager --test com.android.cts.devicepolicy.CustomDeviceOwnerTest#testIsProvisioningAllowed

Bug: 31895999

Change-Id: I10dc3043653130ae717a1d3d8256c9e73231bb21