From 3d55d829c03fe78ad8cdab119293efb6c6e49c64 Mon Sep 17 00:00:00 2001
From: Steve Howard <showard@google.com>
Date: Sun, 12 Sep 2010 18:53:31 -0700
Subject: New URI structure with "my_downloads" and "all_downloads"

This change introduces a second view into the download manager
database via a set of URIs starting with /all_downloads, renaming the
original /download URIs to /my_downloads.  In addition to making
things more clear, this change allows the downloads UI to grant
permissions on individual downloads to viewer apps.

The old semantics were:

* for ordinary callers, /download included only downloads initiated by
  the calling UID
* for intraprocess calls or calls by root, /download included all
  downloads

The new semantics are

* /my_downloads always includes only downloads initiated by the
  calling UID, and requires only INTERNET permission.  It could just
  as well require no permission, but that's not possible in the
  framework, since path-permissions can only broaden access, not
  tighten it.  It doesn't matter, because these URIs are useless
  without INTERNET permission -- if a user can't initiate downloads,
  there's no reason to read this.
* /all_downloads always includes all downloads on the system, and
  requires the new permission ACCESS_ALL_DOWNLOADS.  This permission
  is currently protectionLevel=signature -- this could be relaxed
  later to support third-party download managers.

All download manager code has been changed to use /all_downloads URIs,
except when passing a URI to another app.  In making this change
across the download manager code, I've taken some liberties in
cleaning things up.  Other apps are unchanged and will use
/my_downloads.

Finally, this incorporates changes to DownloadManager to return a
content URI for /cache downloads -- the download UI no longer assumes
it's a file URI, and it grants permissions to the receiver of the VIEW
intent.  The public API test has also been updated.

I've also fixed some null cursor checking in DownloadManager.

Change-Id: I05a501eb4388249fe80c43724405657c950d7238
---
 res/values/strings.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'res')

diff --git a/res/values/strings.xml b/res/values/strings.xml
index b0d95ce5..1623fbe2 100644
--- a/res/values/strings.xml
+++ b/res/values/strings.xml
@@ -98,6 +98,17 @@
     to download files through the download manager without any notification
     being shown to the user.</string>
 
+    <!-- The label for the permission to access all downloads in the download
+    manager, not just those owned by the calling user [CHAR LIMIT=50] -->
+    <string name="permlab_accessAllDownloads">Access all system
+    downloads</string>
+
+    <!-- The full sentence description for the permission to access all
+    downloads in the download manager, not just those owned by the calling user
+    [CHAR LIMIT=160] -->
+    <string name="permdesc_accessAllDownloads">Allows the application to view
+    and modify all initiated by any application on the system.</string>
+
 
     <!-- This is the title that is used when displaying the notification
     for a download that doesn't have a title associated with it. -->
-- 
cgit v1.2.3