Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 63846a70 authored by Julia Reynolds's avatar Julia Reynolds Committed by Christopher Dombroski
Browse files

Add cross user permission check - areNotificationsEnabledForPackage 

Test: atest
Fixes: 128599467
Change-Id: I13a0ca7590f8c4b44379730e0ee2088aba400c2a
Merged-In: I13a0ca7590f8c4b44379730e0ee2088aba400c2a
(cherry picked from commit 657d1641)
parent 9bdc35b2

services/core/java/com/android/server/notification/NotificationManagerService.java

+5 −0
Original line number Diff line number Diff line
@@ -2186,6 +2186,11 @@ public class NotificationManagerService extends SystemService { 
        @Override

        public boolean areNotificationsEnabledForPackage(String pkg, int uid) {

            checkCallerIsSystemOrSameApp(pkg);

            if (UserHandle.getCallingUserId() != UserHandle.getUserId(uid)) {

                getContext().enforceCallingPermission(

                        android.Manifest.permission.INTERACT_ACROSS_USERS,

                        "canNotifyAsPackage for uid " + uid);

            }



            return mRankingHelper.getImportance(pkg, uid) != IMPORTANCE_NONE;

        }

services/tests/uiservicestests/src/com/android/server/notification/NotificationManagerServiceTest.java

+19 −0
Original line number Diff line number Diff line
@@ -34,6 +34,7 @@ import static android.app.NotificationManager.Policy.SUPPRESSED_EFFECT_SCREEN_ON 
import static android.app.NotificationManager.Policy.SUPPRESSED_EFFECT_STATUS_BAR;

import static android.content.pm.PackageManager.FEATURE_WATCH;

import static android.content.pm.PackageManager.PERMISSION_DENIED;

import static android.content.pm.PackageManager.PERMISSION_GRANTED;

import static android.os.Build.VERSION_CODES.O_MR1;

import static android.os.Build.VERSION_CODES.P;
@@ -106,6 +107,7 @@ import android.testing.AndroidTestingRunner; 
import android.testing.TestableContext;

import android.testing.TestableLooper;

import android.testing.TestableLooper.RunWithLooper;

import android.testing.TestablePermissions;

import android.text.Html;

import android.util.ArrayMap;

import android.util.AtomicFile;
@@ -3145,4 +3147,21 @@ public class NotificationManagerServiceTest extends UiServiceTestCase { 


        assertEquals(0, captor.getValue().getNotification().flags);

    }



    @Test

    public void testAreNotificationsEnabledForPackage_crossUser() throws Exception {

        try {

            mBinderService.areNotificationsEnabledForPackage(mContext.getPackageName(),

                    mUid + UserHandle.PER_USER_RANGE);

            fail("Cannot call cross user without permission");

        } catch (SecurityException e) {

            // pass

        }



        // cross user, with permission, no problem

        TestablePermissions perms = mContext.getTestablePermissions();

        perms.setPermission(android.Manifest.permission.INTERACT_ACROSS_USERS, PERMISSION_GRANTED);

        mBinderService.areNotificationsEnabledForPackage(mContext.getPackageName(),

                mUid + UserHandle.PER_USER_RANGE);

    }

}