summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | | | | | Automatic translation importMichael Bestas2020-01-271-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I298d047af4fcc684c382e87cae4fc4b79ebde9f0
* | | | | | | | | PermissionController: Enable permission hub by defaultstaging/lineage-17.0_merge-android-10.0.0_r9Luca Stefani2019-12-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I0c7539947d381264db4c8c6cd80e3e490206fdbc
* | | | | | | | | Revert "Remove Permissions Hub."Luca Stefani2019-12-1115-10/+2127
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit 5747740517e37ebe05209fde129cc776af4c2127. Change-Id: Ic38e77e8b11baa2dded3593089720d6592d8ddb6
* | | | | | | | | Merge cherrypicks of [9540994, 9540080, 9540966, 9540888, 9540238, 9540889, ↵android-build-team Robot2019-10-112-6/+63
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 9540890, 9540891, 9540562, 9540996, 9540997, 9540998, 9540999, 9541000, 9540968, 9540969, 9540081, 9541003, 9539963, 9541104, 9541105, 9541144, 9541145, 9541146, 9541147, 9541148, 9541149, 9540970, 9541150, 9541152] into qt-qpr1-b-release Change-Id: If4d49bcff423e0a9ce2035e37c10aee0c2a68097
| * | | | | | | | | Update PermissionChecker usages to avoid unnecessary attribution.Svet Ganov2019-10-112-6/+63
|/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We had accidental usages of the PermissionChecker for cases where no private data was provided to the app but the checkPermission API on the latter also did blame data access on the app. The PermissionChecker was designed to handle IPC calls and not for generic API checks. To avoid future accidental incorrect PermissionChecker usages this change renames the existing APIs of the latter to clearly indicate that they should be used for data delivery and also adds sibling methods for doing the same permission checks for preflight purposes. Also the documentation is improved to furhter assist developers. In addition, this change fixes accidental permission checker usages that blame when they should not by using the new preflight flavor of the permission check APIs. Test: atest com.android.settingslib.location.RecentLocationAppsTest atest CtsPermissionTestCases added: LocationAccessCheckTest#notificationOnlyForAccessesSinceFeatureWasEnabled added: LocationAccessCheckTest#noNotificationIfFeatureDisabled added: LocationAccessCheckTest#noNotificationIfBlamerNotSystemOrLocationProvider added: LocationAccessCheckTest#testOpeningLocationSettingsDoesNotTriggerAccess bug:141028068 Merged-In: I902a0ab049783a222ac2acdfac93ecd49f34dece Change-Id: I902a0ab049783a222ac2acdfac93ecd49f34dece (cherry picked from commit 625b69e00869d041b3114346965cd72a5d5c3c6a)
* | | | | | | | | Snap for 5907400 from 1189512b64f1992b69634d715ac62a280ac55314 to ↵android-build-team Robot2019-09-2810-12/+12
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I6d8cd6df7c4dba8f507950eeeb09182eafb56c5f
| * | | | | | | | Import translations. DO NOT MERGEBill Yi2019-09-2710-12/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Ib5fa114958e95e681fd5c23a09a8927829c72272 Auto-generated-cl: translation import
* | | | | | | | | Snap for 5892339 from ddb202551ae029dccbbe592274cdea20e30bc606 to ↵android-build-team Robot2019-09-213-6/+47
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I4de8c7097d8844392473ee459504e638a1061b37
| * | | | | | | | Merge "[DO NOT MERGE] Grant all access_media_location permission" into ↵Philip P. Moltmann2019-09-201-2/+42
| |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-dev
| | * | | | | | | | [DO NOT MERGE] Grant all access_media_location permissionPhilip P. Moltmann2019-09-201-2/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Test: Manual testing: All combinations of - App targetSdk = 28 and 29 (and 22 for extra credit) - App having the <uses-permission> tag for ACCESS_MEDIA_LOCATION or not - Upgrade from P->Q-QPR and from vanilla Q->Q-QPR Further upgrade of targetSdk from 28->29 while on Q-QPR ==> All permission behavior should make sense. Sometimes there are weird, but expected behaviors. Hence we need to collect the results and then look at the unexpected ones. See SplitPermissionTest for some tests I added for the location-background permission which was split from the fine/coarse-location permissions Bug: 140961754 Change-Id: I11f0b77d86d0c07b9bcd41eee337f36bacf0dabd
| * | | | | | | | | [DO NOT MERGE] Move updateUserSenstive trigger to onGrantDefaultRolesPhilip P. Moltmann2019-09-192-4/+5
| |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We need to recalculate the user sensitivity every time a package is installed or changes. The logic to recalculate was moved to only during boot. Move it back to where it was before, but leave it async. Test: forcefully installed GooglePermissionsController to override out-of-date mainline module. Then verified that with code before this change user-sensitive was not updated for newly installed apps. With this change user-sensitive is updated Bug: 141311767 Change-Id: I6c100764850870e2e5d1ffe5fcd20b5cf2f94ed1
* | | | | | | | | Snap for 5877031 from 36f401ded229f78db2e21006059af83f7c3cb2cd to ↵android-build-team Robot2019-09-152-4/+4
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: Ia82c0697e52a9220d6136bf0807fe5e71183f53c
| * | | | | | | | Import translations. DO NOT MERGEBill Yi2019-09-142-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I22ed63fa6dd2d84b4e5226bc4c1e1afe7dc060d2 Auto-generated-cl: translation import
* | | | | | | | | Snap for 5876498 from 035153413e9ec8341c88cfa3ad56934a7f441358 to ↵android-build-team Robot2019-09-142-5/+4
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I6de874e02d18c8bdab4fe10bcc84b0c0cd60f264
| * | | | | | | | Merge "updateUserSensitive asynchronously" into qt-qpr1-devTreeHugger Robot2019-09-122-5/+4
| |\ \ \ \ \ \ \ \
| | * | | | | | | | updateUserSensitive asynchronouslyEugene Susla2019-08-302-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is known to take 500ms and affects only UI, so can be done async Test: Ensure nothing looks badly broken; presubmit Fixes: 139485700 Change-Id: I3837404ea7d9b1598efa0d35cc999af0e86cc7f2
* | | | | | | | | | Snap for 5860054 from 076bb687968186c65bb429b5257d72598a1d594c to ↵android-build-team Robot2019-09-071-1/+1
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I235cb00766bc0b7a85eff8f042f79669eaa5a15b
| * | | | | | | | | Fix the bug where backgroung permissions changes were not logged.Stanislav Zholnin2019-09-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix: 140501898 Test: make statsd_testdrive && ./out/host/linux-x86/bin/statsd_testdrive -p com.google.android.permissioncontroller 215 Change-Id: I8d2f5e87ac98c6e81c6afdb531dd61d2dc76ccea
* | | | | | | | | | Snap for 5849705 from e8121111976a293e34b33fbced2424b997848d72 to ↵android-build-team Robot2019-09-042-5/+5
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: Ib6eb2e7cc9f135da8e31850b5d3f2f309bc3ec13
| * | | | | | | | | Import translations. DO NOT MERGEBill Yi2019-09-032-5/+5
| |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Auto-generated-cl: translation import Bug: 64712476 Change-Id: I309d921f7ba7947821a251bb53cd5ed2d7403ad9
* | | | | | | | | Snap for 5834835 from 1719c99a5f31621c270ad10068e90eec48c61812 to ↵android-build-team Robot2019-08-284-3/+37
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I850b90319e3c682073d74be0f744f2311d1e5a92
| * | | | | | | | Don't show Settings as a home app anywhere in UI.Hai Zhang2019-08-264-3/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | FallbackHome inside Settings should not be explicitly set as the home activity by user, which will prevent the device from getting a real home app running. It is already hidden in Default apps settings, but it needs to be hidden in the request role dialog as well. Fixes: 139919985 Test: Manually confirm Setting doesn't appear in request role dialog Test: or Default apps settings. Change-Id: I6f8e935ebc6ff3aed6a54c595a2e5492321432a8
* | | | | | | | | Snap for 5817507 from 0e7ae6d3b060ab5a17d028f27401ec3716dfd0f7 to ↵android-build-team Robot2019-08-211-6/+14
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I2328840057a33ea6bd5d06057050034730c6cca5
| * | | | | | | | Cache PermissionInfos in whitelistAllSystemAppPermissionsPhilip P. Moltmann2019-08-191-6/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PermissionInfo-s are not per package. Hence instead of resolving them over and over again, cache already resolved PermissionInfo and reuse them. Before whitelistAllSystemAppPermissions took between 600 and 1100 ms on a crosshatch-eng. Now it takes between 200-350 ms. Test: Booted a few time and measured how long this method took Bug: 139485700 Fixes: 136682954 Change-Id: I83221f9fb2ed00b67957a633d26906f4d8aeb26e
* | | | | | | | | Snap for 5797413 from 3a0677ae54d9cb7bc8a3ee60454bb56d11d1833d to ↵android-build-team Robot2019-08-1312-80/+80
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: Ib0a6753d2ec0180743353c432e1f5610d58c0829
| * | | | | | | | [automerger skipped] Import translations. DO NOT MERGE am: 28a83964de -s oursBill Yi2019-08-110-0/+0
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 2d69385fcd -s ours am skip reason: subject contains skip directive Change-Id: I80fbdbf22474ff9cac3cd1754a90004880ef5ea9
| | * | | | | | | [automerger skipped] Import translations. DO NOT MERGEBill Yi2019-08-110-0/+0
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 28a83964de -s ours am skip reason: subject contains skip directive Change-Id: I130cdd3c8c0bc456bc4a50f4b8354082be188cf2
| | | * | | | | | Import translations. DO NOT MERGEBill Yi2019-08-1012-80/+80
| | | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Auto-generated-cl: translation import Bug: 64712476 Change-Id: I07c3d6bac7a4d0b35b526260b620f74fe686d375
| * | | | | | | [automerger skipped] Import translations. DO NOT MERGEBill Yi2019-08-110-0/+0
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: e61f13baa0 -s ours am skip reason: subject contains skip directive Change-Id: I67134c8d1f15e38dbb960715bdb5a8a798493d2a
| | * | | | | | Import translations. DO NOT MERGEBill Yi2019-08-107-10/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Auto-generated-cl: translation import Bug: 64712476 Change-Id: If9bdf4487eb50cd3add155ba4381d3d294a97094
| * | | | | | | Import translations. DO NOT MERGEBill Yi2019-08-1012-80/+80
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Auto-generated-cl: translation import Bug: 64712476 Change-Id: I2240ecdc42ce11d4806f7acf8ee8c1847517e0c5
* | | | | | | | Snap for 5767086 from 1f748546449f810ca3a9ae49a71ca8f7efd6ed6c to ↵android-build-team Robot2019-07-311-10/+8
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I47d05f297e9011f131a4680b793f728c1f69c265
| * | | | | | | Use serial executor for permission operations.Hai Zhang2019-07-291-10/+8
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 8465ba7367 Change-Id: I58c423a5c09d16f261d691e3fdb19b3a4c83e466
| | * | | | | | Use serial executor for permission operations.Hai Zhang2019-07-291-10/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the methods are called concurrently and we are calling AppPermissions.persistChanges(), we might be overwriting the state that have been changed by another thread but not reflected in our state obtained earlier. Fixes: 133398449 Test: presubmit Change-Id: I63f715bafbf0ce24e75246930c7b271ee64b2e1b
* | | | | | | | Snap for 5764218 from 976d785a3235315f11b689cd1acf7a99f97a73a3 to ↵android-build-team Robot2019-07-301-1/+5
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I7c36dbb1623c39a96f3bd84e279197c49bb84070
| * | | | | | | Merge "Call callbacks when we finish early due to no permission to review." ↵Hai Zhang2019-07-291-0/+1
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | into qt-r1-dev am: 718d70bce6 Change-Id: I12fe4d37b909becafd6830671ff46ac0a9bcc312
| | * | | | | | Merge "Call callbacks when we finish early due to no permission to review." ↵TreeHugger Robot2019-07-291-0/+1
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | into qt-r1-dev
| | | * | | | | | Call callbacks when we finish early due to no permission to review.Hai Zhang2019-07-261-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Otherwise we won't continue starting the activity/binding the service for pre-M apps that ask for only restricted permissions. Test: presubmit Change-Id: I5331b52e93eb4e0497de51837f3be79ec00f9495
| * | | | | | | | Fix permission review crash if there's no permission to review.Hai Zhang2019-07-291-1/+4
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: e50e3c0169 Change-Id: If2edb8dc9f5e781bd70efa99a9631dfbef0c3c57
| | * | | | | | | Fix permission review crash if there's no permission to review.Hai Zhang2019-07-261-1/+4
| | |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: 138386074 Test: presubmit & manual Change-Id: I4d431206742de017c4000d465fedb3033a98d457
* | | | | | | | Snap for 5760827 from 9cc261940418971a29ff486ebd208f634b3192f9 to ↵android-build-team Robot2019-07-270-0/+0
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I2a7dabc138a00d4e5d2daebc4aab131ad87a4e9b
| * | | | | | | [automerger skipped] Merge "Import translations. DO NOT MERGE" into qt-r1-devBill Yi2019-07-250-0/+0
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 77db2a916a -s ours am skip reason: subject contains skip directive Change-Id: I87feefbacf5d65d3f61366db36206c0bb654dcc6
| | * | | | | | Merge "Import translations. DO NOT MERGE" into qt-r1-devTreeHugger Robot2019-07-255-70/+70
| | |\ \ \ \ \ \
| | | * | | | | | Import translations. DO NOT MERGEBill Yi2019-07-255-70/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Auto-generated-cl: translation import Bug: 64712476 Change-Id: Ifcd153f697777dc38d4abee49ac01705263a521a
| * | | | | | | | Fix filtering for browser apps.Hai Zhang2019-07-241-3/+1
| |\| | | | | | | | | |/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: e237eb8949 Change-Id: Ib1d98a40589b71cb46a42e10f0c9cdb4504a739d
* | | | | | | | Snap for 5752705 from e237eb894927ccbe0bf1a15421a03b998c42d591 to ↵android-build-team Robot2019-07-251-3/+1
|\ \ \ \ \ \ \ \ | | |/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: Ibe303f6007dc861e14a0bdadb7b36536d67d9bf1
| * | | | | | | Fix filtering for browser apps.Hai Zhang2019-07-231-3/+1
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Despite what the javadoc on PackageManager.MATCH_ALL says, it actually still performs all kinds of filtering and only affects whether to return only the default browser for browser intent. So no need for extra filtering on the result. The previous filtering based upon ActivityInfo.enabled and ApplicationInfo.enabled is incorrect because they only reflect the state declared in manifest, not the actual state. Fixes: 137731581 Test: presubmit Change-Id: I61a1dcd572d2ada01ec96c9399be38f66ad88bbb
* | | | | | | Snap for 5733681 from 7bb22d54dd254e13506d116fecaecfa878126678 to ↵android-build-team Robot2019-07-171-30/+34
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | qt-qpr1-release Change-Id: I062042d4547d39b2601d8cc55f4b93bf1883f495
| * | | | | | Fix assistant role availability on low ram devices.Hai Zhang2019-07-161-30/+34
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 2300b89008 Change-Id: I9c848ede27ffdb4be77d36d289205d28aaf03c1c
| | * | | | | Fix assistant role availability on low ram devices.Hai Zhang2019-07-151-30/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The assistant role should be available on low ram devices, just that only assistant activities but not assistant services can be qualified. Fixes: 137388024 Test: presubmit & manual Change-Id: Ie84fd163fb49c0514f51ba64ba89c225dceb2e5b