Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7f632dca authored by Alex Johnston's avatar Alex Johnston
Browse files

Stop managed profile owner granting READ_SMS 

Reason: There is only one telephony stack shared
between the personal and work profile.

Bug: 194382185
Bug: 189942529
Test: atest com.android.cts.devicepolicy.MixedManagedProfileOwnerTest#testGrantOfSensorsRelatedPermissions
      atest com.android.cts.devicepolicy.MixedManagedProfileOwnerTest#testDenyOfSensorsRelatedPermissions
      atest com.android.cts.devicepolicy.MixedManagedProfileOwnerTest#testSensorsRelatedPermissionsNotGrantedViaPolicy
      atest com.android.cts.devicepolicy.MixedDeviceOwnerTest#testGrantOfSensorsRelatedPermissions
      atest com.android.cts.devicepolicy.MixedDeviceOwnerTest#testDenyOfSensorsRelatedPermissions
      atest com.android.cts.devicepolicy.MixedDeviceOwnerTest#testSensorsRelatedPermissionsNotGrantedViaPolicy
Change-Id: I99384d5713bb2d04f5b6fbe20c17bd72a39b57d7
parent 9028f499

core/java/android/app/admin/DevicePolicyManager.java

+10 −0
Original line number Diff line number Diff line
@@ -10997,6 +10997,16 @@ public class DevicePolicyManager { 
     * {@link #EXTRA_PROVISIONING_SENSORS_PERMISSION_GRANT_OPT_OUT} in the provisioning parameters.

     * In that case the device owner's control will be limited do denying these permissions.

     * <p>

     * NOTE: On devices running {@link android.os.Build.VERSION_CODES#S} and above, control over

     * the following permissions are restricted for managed profile owners:

     * <ul>

     *    <li>Manifest.permission.READ_SMS</li>

     * </ul>

     * <p>

     * A managed profile owner may not grant these permissions (i.e. call this method with any of

     * the permissions listed above and {@code grantState} of

     * {@code #PERMISSION_GRANT_STATE_GRANTED}), but may deny them.

     * <p>

     * Attempts by the admin to grant these permissions, when the admin is restricted from doing

     * so, will be silently ignored (no exception will be thrown).

     *