a482921588bcd06c8a7473dd8648e31d2caca508 - platform_frameworks_base

commit	a482921588bcd06c8a7473dd8648e31d2caca508	[log] [tgz]
author	Adam Bookatz <bookatz@google.com>	Wed Jan 05 12:59:39 2022 -0800
committer	Adam Bookatz <bookatz@google.com>	Wed Jan 12 16:18:00 2022 -0800
tree	9fba65341b9f115108058f7293ebfad66adadddf
parent	040d933827667f0d0f19ba3cf91a9e95bf9a7622 [diff]

Allow bindServiceAsUser without _FULL if same app

Previously we allowed bindServiceAsUser in the following situations:
* caller has INTERACT_ACROSS_USERS_FULL
* caller has INTERACT_ACROSS_USERS and is in same profile group
* caller has INTERACT_ACROSS_PROFILES and is in same profile group and is the same app as the service

We now additionally allow:
* caller has INTERACT_ACROSS_USERS and is the same app as the service
(regardless of whether it is in the same profile group)

Bug: 209989958
Test: tested locally that granting the permission allows access to bindServiceAsUser
Test: atest UserControllerTest
Change-Id: I47d6f86fd159aa993971366ee9d7d334644d391e

core/api/current.txt[diff]
core/java/android/app/ActivityManagerInternal.java[diff]
core/java/android/content/Context.java[diff]
services/core/java/com/android/server/am/ActiveServices.java[diff]
services/core/java/com/android/server/am/UserController.java[diff]
services/tests/servicestests/src/com/android/server/am/UserControllerTest.java[diff]

6 files changed