commit e899d8d48558a6d4a8f0498c38a623115aad2205
author Svet Ganov <svetoslavganov@google.com> Thu Aug 20 01:56:39 2015 -0700
committer Svet Ganov <svetoslavganov@google.com> Thu Aug 20 02:10:17 2015 -0700
tree 3322ac32863fdf14f83cd5bab6c4a2b3263c2d59
parent a9ec5bcd3c2cbbaceece4a6380efc0f04199de48

Grant only requested permissions not the whole group.

The policy for an app requesting permissions is that only the requested permissions
are granted not the whole groups to which these permissions belong. There was a
regression where we granted the whole group not only the requested permissions. If
an app has a permission in a group already granted, now per policy a subsequent
request from the same group is followed by an auto grant.

bug:23370436

Change-Id: Icce6377d60187f6f153d10d646cd8c9878dd6fab