update_engine: Let "power" user query update status.

Change update_engine's D-Bus configuration to allow the
"power" user (used by powerd) to query the update status.
powerd already listens for signals announcing update state
changes, but it also ought to query the current status if it
gets restarted for some reason.

It also removes some "deny" directives that are apparently
undesirable, as "deny" is already the default (see
http://crbug.com/219054).

BUG=none
TEST=confirmed that powerd is able to query the update
     status after being restarted

Change-Id: I60389a20409c2534e5e306bb7662b424f1d272c3
Reviewed-on: https://chromium-review.googlesource.com/182243
Tested-by: Daniel Erat <derat@chromium.org>
Reviewed-by: David Zeuthen <zeuthen@chromium.org>
Reviewed-by: Don Garrett <dgarrett@chromium.org>
Commit-Queue: Daniel Erat <derat@chromium.org>
diff --git a/UpdateEngine.conf b/UpdateEngine.conf
index 3688250..8c04eae 100644
--- a/UpdateEngine.conf
+++ b/UpdateEngine.conf
@@ -6,13 +6,6 @@
     <allow send_destination="org.chromium.UpdateEngine" />
   </policy>
   <policy user="chronos">
-    <!-- introspection is denied -->
-    <deny send_destination="org.chromium.UpdateEngine"
-          send_interface="org.freedesktop.DBus.Introspectable" />
-    <!-- properties denied -->
-    <deny send_destination="org.chromium.UpdateEngine"
-          send_interface="org.freedesktop.DBus.Properties" />
-    <!-- allow explicit methods -->
     <allow send_destination="org.chromium.UpdateEngine"
            send_interface="org.chromium.UpdateEngineInterface"
            send_member="AttemptUpdate"/>
@@ -54,7 +47,9 @@
            send_member="GetDurationSinceUpdate"/>
     <allow send_interface="org.chromium.UpdateEngineLibcrosProxyResolvedInterface" />
   </policy>
-  <policy context="default">
-    <deny send_destination="org.chromium.UpdateEngine" />
+  <policy user="power">
+    <allow send_destination="org.chromium.UpdateEngine"
+           send_interface="org.chromium.UpdateEngineInterface"
+           send_member="GetStatus"/>
   </policy>
 </busconfig>