67ac7c676034df28397be43c658a4ad6e4b0396b - platform_frameworks_base

commit	67ac7c676034df28397be43c658a4ad6e4b0396b	[log] [tgz]
author	kholoud mohamed <kholoudm@google.com>	Fri Dec 06 16:33:48 2019 +0000
committer	Kholoud Mohamed <kholoudm@google.com>	Thu Jan 09 12:04:04 2020 +0000
tree	0150152d28ad2d8d2603152125a685a3df8ece14
parent	2ddb0eb5c20e205a1d9e0e6caab45d49633f327b [diff]

Give INTERACT_ACROSS_PROFILES parity with _USERS for bindServiceAsUser API

INTERACT_ACROSS_PROFILES should work as a replacement for INTERACT_ACROSS_USERS so we don't have to give privileged system components a permission that is more powerful than is necessary.
Javadoc and annotations of the bindServiceAsUser API will be modified in a subsequent CL.
Unlike INTERACT_ACROSS_USERS, calling an API for a user in a different profile group will throw a SecurityException.

BUG: 140807471
BUG: 136249261
Test: atest ContextCrossProfileHostTest
Test: tested locally that granting the permission allows access to
bindServiceAsUser

Change-Id: I2878067bb2369d26a9ac5504ddd8c0e753f67898

core/java/android/app/ActivityManagerInternal.java[diff]
services/core/java/com/android/server/am/ActiveServices.java[diff]
services/core/java/com/android/server/am/UserController.java[diff]
services/core/java/com/android/server/pm/PackageManagerService.java[diff]
services/core/java/com/android/server/pm/permission/PermissionManagerService.java[diff]
services/core/java/com/android/server/pm/permission/PermissionManagerServiceInternal.java[diff]

6 files changed