Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c52b05d1 authored by Momoko Hattori's avatar Momoko Hattori
Browse files

Move test(Set|Revoke)UserAdmin* to UserManagerServiceMockedTest 

The new test case for revokeUserAdmin() being added in CL:33795062 needs
to be implemented in UserManagerServiceMockedTest to guarantee that
there is only one full admin user on the test environment, while the
existing test cases for this method live in UserManagerTest.
Move all the tests for revokeUserAdmin() from UserManagerTest to
UserManagerServiceMockedTest so that the new test case can be added in
the same class as the existing tests.
Also move the tests for setUserAdmin() for consistency.

Bug: 411222385
Test: atest FrameworksMockingServicesTests:UserManagerServiceMockedTest
Flag: TEST_ONLY

Change-Id: Ic07d08c6fedb90316e7c4e1cfb87f47c636083eb
parent e6058975

services/tests/mockingservicestests/src/com/android/server/pm/UserManagerServiceMockedTest.java

+175 −39
Original line number Diff line number Diff line
@@ -22,16 +22,19 @@ import static android.content.pm.PackageManager.FEATURE_WATCH; 
import static android.content.pm.UserInfo.FLAG_ADMIN;

import static android.content.pm.UserInfo.FLAG_FULL;

import static android.multiuser.Flags.FLAG_BLOCK_PRIVATE_SPACE_CREATION;

import static android.multiuser.Flags.FLAG_DEMOTE_MAIN_USER;

import static android.multiuser.Flags.FLAG_ENABLE_PRIVATE_SPACE_FEATURES;

import static android.multiuser.Flags.FLAG_LOGOUT_USER_API;

import static android.multiuser.Flags.FLAG_SUPPORT_AUTOLOCK_FOR_PRIVATE_SPACE;

import static android.multiuser.Flags.FLAG_DEMOTE_MAIN_USER;

import static android.multiuser.Flags.FLAG_UNICORN_MODE_REFACTORING_FOR_HSUM_READ_ONLY;

import static android.os.Flags.FLAG_ALLOW_PRIVATE_PROFILE;

import static android.os.UserHandle.USER_SYSTEM;

import static android.os.UserManager.DISALLOW_OUTGOING_CALLS;

import static android.os.UserManager.DISALLOW_SMS;

import static android.os.UserManager.DISALLOW_USER_SWITCH;

import static android.os.UserManager.USER_TYPE_FULL_RESTRICTED;

import static android.os.UserManager.USER_TYPE_FULL_SECONDARY;

import static android.os.UserManager.USER_TYPE_PROFILE_MANAGED;

import static android.os.UserManager.USER_TYPE_PROFILE_PRIVATE;

import static android.os.UserManager.USER_TYPE_PROFILE_SUPERVISING;

import static android.content.pm.UserInfo.flagsToString;
@@ -172,6 +175,7 @@ public final class UserManagerServiceMockedTest { 
            .spyStatic(LocalServices.class)

            .spyStatic(SystemProperties.class)

            .spyStatic(ActivityManager.class)

            .spyStatic(UserHandle.class)

            .mockStatic(Settings.Global.class)

            .mockStatic(Settings.Secure.class)

            .mockStatic(Resources.class)
@@ -331,7 +335,7 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testIsUserRunning_StartedUserShouldReturnTrue() {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        startUser(USER_ID);



        assertWithMessage("isUserRunning(%s)", USER_ID)
@@ -340,7 +344,7 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testIsUserRunning_StoppedUserShouldReturnFalse() {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        stopUser(USER_ID);



        assertWithMessage("isUserRunning(%s)", USER_ID)
@@ -367,8 +371,8 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testSetBootUser_SuppliedUserIsSwitchable() throws Exception {

        addUser(USER_ID);

        addUser(OTHER_USER_ID);

        addSecondaryUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);



        mUms.setBootUser(OTHER_USER_ID);
@@ -379,8 +383,8 @@ public final class UserManagerServiceMockedTest { 
    @Test

    public void testSetBootUser_NotHeadless_SuppliedUserIsNotSwitchable() throws Exception {

        setSystemUserHeadless(false);

        addUser(USER_ID);

        addUser(OTHER_USER_ID);

        addSecondaryUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        addDefaultProfileAndParent();



        mUms.setBootUser(PROFILE_USER_ID);
@@ -393,9 +397,9 @@ public final class UserManagerServiceMockedTest { 
    @Test

    public void testSetBootUser_Headless_SuppliedUserIsNotSwitchable() throws Exception {

        setSystemUserHeadless(true);

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        addUser(OTHER_USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 2_000_000L);

        addDefaultProfileAndParent();
@@ -408,8 +412,8 @@ public final class UserManagerServiceMockedTest { 
    @Test

    public void testGetBootUser_NotHeadless_ReturnsSystemUser() throws Exception {

        setSystemUserHeadless(false);

        addUser(USER_ID);

        addUser(OTHER_USER_ID);

        addSecondaryUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);



        assertWithMessage("getBootUser")

                .that(mUmi.getBootUser(/* waitUntilSet= */ false))
@@ -419,10 +423,10 @@ public final class UserManagerServiceMockedTest { 
    @Test

    public void testGetBootUser_Headless_ReturnsMostRecentlyInForeground() throws Exception {

        setSystemUserHeadless(true);

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);



        addUser(OTHER_USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 2_000_000L);



        assertWithMessage("getBootUser")
@@ -452,9 +456,9 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testGetPreviousUserToEnterForeground() throws Exception {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        addUser(OTHER_USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 2_000_000L);



        assertWithMessage("getPreviousUserToEnterForeground")
@@ -464,9 +468,9 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testGetPreviousUserToEnterForeground_SkipsCurrentUser() throws Exception {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        addUser(OTHER_USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 2_000_000L);



        mockCurrentUser(OTHER_USER_ID);
@@ -477,9 +481,9 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testGetPreviousUserToEnterForeground_SkipsPartialUsers() throws Exception {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        addUser(OTHER_USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 2_000_000L);



        mUsers.get(OTHER_USER_ID).info.partial = true;
@@ -490,9 +494,9 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testGetPreviousUserToEnterForeground_SkipsDisabledUsers() throws Exception {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        addUser(OTHER_USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 2_000_000L);



        mUsers.get(OTHER_USER_ID).info.flags |= UserInfo.FLAG_DISABLED;
@@ -503,9 +507,9 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testGetPreviousUserToEnterForeground_SkipsRemovingUsers() throws Exception {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        addUser(OTHER_USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 2_000_000L);



        mUms.addRemovingUserId(OTHER_USER_ID);
@@ -516,7 +520,7 @@ public final class UserManagerServiceMockedTest { 


    @Test

    public void testGetPreviousUserToEnterForeground_ReturnsHeadlessSystemUser() throws Exception {

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        setSystemUserHeadless(true);

        mockCanSwitchToHeadlessSystemUser(true);
@@ -949,8 +953,8 @@ public final class UserManagerServiceMockedTest { 
    @Test

    public void testGetBootUser_Headless_BootToSystemUserWhenDeviceIsProvisioned() {

        setSystemUserHeadless(true);

        addUser(USER_ID);

        addUser(OTHER_USER_ID);

        addSecondaryUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        mockProvisionedDevice(true);

        mockHsumBootStrategy(BOOT_TO_HSU_FOR_PROVISIONED_DEVICE);
@@ -960,8 +964,8 @@ public final class UserManagerServiceMockedTest { 
    @Test

    public void testGetBootUser_Headless_BootToFirstSwitchableFullUserWhenDeviceNotProvisioned() {

        setSystemUserHeadless(true);

        addUser(USER_ID);

        addUser(OTHER_USER_ID);

        addSecondaryUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        mockProvisionedDevice(false);

        mockHsumBootStrategy(BOOT_TO_HSU_FOR_PROVISIONED_DEVICE);

        // Even if the headless system user switchable flag is true, the boot user should be the
@@ -988,7 +992,7 @@ public final class UserManagerServiceMockedTest { 
    public void testGetUserLogoutability_HsumAndInteractiveHeadlessSystemUser_UserCanLogout()

            throws Exception {

        setSystemUserHeadless(true);

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        mockCurrentUser(USER_ID);
@@ -1005,7 +1009,7 @@ public final class UserManagerServiceMockedTest { 
            throws Exception {

        setSystemUserHeadless(true);

        mockCanSwitchToHeadlessSystemUser(false);

        addUser(USER_ID);

        addSecondaryUser(USER_ID);

        setLastForegroundTime(USER_ID, 1_000_000L);

        mockCurrentUser(USER_ID);

        mockUserIsInCall(false);
@@ -1041,8 +1045,8 @@ public final class UserManagerServiceMockedTest { 
    public void testGetUserLogoutability_CannotSwitch_CannotLogout() throws Exception {

        setSystemUserHeadless(true);

        mockCanSwitchToHeadlessSystemUser(true);

        addUser(USER_ID);

        addUser(OTHER_USER_ID);

        addSecondaryUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        setLastForegroundTime(OTHER_USER_ID, 1_000_000L);

        mockCurrentUser(USER_ID);

        mUms.setUserRestriction(DISALLOW_USER_SWITCH, true, USER_ID);
@@ -1621,7 +1625,7 @@ public final class UserManagerServiceMockedTest { 
    @Test

    public void testIsLastFullAdminUser_hsum_targetNotAdmin_returnsFalse() {

        setSystemUserHeadless(true);

        addUser(USER_ID); // USER_ID is full, not admin

        addSecondaryUser(USER_ID); // USER_ID is full, not admin

        addAdminUser(OTHER_USER_ID); // OTHER_USER_ID is full, admin



        assertThat(mUms.isLastFullAdminUserLU(mUsers.get(USER_ID).info)).isFalse();
@@ -1652,7 +1656,7 @@ public final class UserManagerServiceMockedTest { 
    public void testIsLastFullAdminUser_hsum_targetAdmin_otherFullNotAdmin_returnsTrue() {

        setSystemUserHeadless(true);

        addAdminUser(USER_ID); // USER_ID is full, admin (target)

        addUser(OTHER_USER_ID); // OTHER_USER_ID is full, not admin

        addSecondaryUser(OTHER_USER_ID); // OTHER_USER_ID is full, not admin



        assertThat(mUms.isLastFullAdminUserLU(mUsers.get(USER_ID).info)).isTrue();

    }
@@ -1707,7 +1711,7 @@ public final class UserManagerServiceMockedTest { 
        setSystemUserHeadless(false);



        // Add another non-admin full user to ensure system is not the *only* user

        addUser(USER_ID);

        addSecondaryUser(USER_ID);



        assertThat(mUms.isLastFullAdminUserLU(mUsers.get(UserHandle.USER_SYSTEM).info)).isTrue();

    }
@@ -1722,6 +1726,102 @@ public final class UserManagerServiceMockedTest { 
        assertThat(mUms.isLastFullAdminUserLU(mUsers.get(USER_ID).info)).isFalse();

    }



    @Test

    public void testSetUserAdmin() {

        addSecondaryUser(USER_ID);



        mUms.setUserAdmin(USER_ID);



        assertThat(mUsers.get(USER_ID).info.isAdmin()).isTrue();

    }



    @Test

    @RequiresFlagsEnabled(FLAG_UNICORN_MODE_REFACTORING_FOR_HSUM_READ_ONLY)

    public void testSetUserAdminThrowsSecurityException() {

        addSecondaryUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        mockCallingUserId(OTHER_USER_ID);



        // 1. Target User Restriction

        mUms.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true, USER_ID);

        assertThrows(SecurityException.class, () -> mUms.setUserAdmin(USER_ID));



        // 2. Current User Restriction

        mUms.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false, USER_ID);

        mUms.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true, OTHER_USER_ID);

        assertThrows(SecurityException.class, () -> mUms.setUserAdmin(USER_ID));

    }



    @Test

    public void testSetUserAdminFailsForGuest() {

        addGuestUser(USER_ID);



        mUms.setUserAdmin(USER_ID);



        assertThat(mUsers.get(USER_ID).info.isAdmin()).isFalse();

    }



    @Test

    public void testSetUserAdminFailsForProfile() {

        addSecondaryUser(PARENT_USER_ID);

        addProfile(PROFILE_USER_ID, PARENT_USER_ID, USER_TYPE_PROFILE_MANAGED);



        mUms.setUserAdmin(PROFILE_USER_ID);



        assertThat(mUsers.get(PROFILE_USER_ID).info.isAdmin()).isFalse();

    }



    @Test

    public void testSetUserAdminFailsForRestrictedProfile() {

        addRestrictedProfile(USER_ID);



        mUms.setUserAdmin(USER_ID);



        assertThat(mUsers.get(USER_ID).info.isAdmin()).isFalse();

    }



    @Test

    public void testRevokeUserAdmin() {

        addAdminUser(USER_ID);



        mUms.revokeUserAdmin(USER_ID);



        assertThat(mUsers.get(USER_ID).info.isAdmin()).isFalse();

    }



    @Test

    public void testRevokeUserAdminFromNonAdmin() {

        addSecondaryUser(USER_ID);



        mUms.revokeUserAdmin(USER_ID);



        assertThat(mUsers.get(USER_ID).info.isAdmin()).isFalse();

    }



    @Test

    @RequiresFlagsEnabled(FLAG_UNICORN_MODE_REFACTORING_FOR_HSUM_READ_ONLY)

    public void testRevokeUserAdminThrowsSecurityException() {

        addAdminUser(USER_ID);

        addSecondaryUser(OTHER_USER_ID);

        mockCallingUserId(OTHER_USER_ID);



        // 1. Target User Restriction

        mUms.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true, USER_ID);

        assertThrows(SecurityException.class, () -> mUms.revokeUserAdmin(USER_ID));



        // 2. Current User Restriction

        mUms.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false, USER_ID);

        mUms.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true, OTHER_USER_ID);

        assertThrows(SecurityException.class, () -> mUms.revokeUserAdmin(USER_ID));

    }



    @Test

    public void testRevokeUserAdminFailsForSystemUser() {

        mUms.revokeUserAdmin(UserHandle.USER_SYSTEM);



        assertThat(mUsers.get(UserHandle.USER_SYSTEM).info.isAdmin()).isTrue();

    }



    /**

     * Returns true if the user's XML file has Default restrictions

     * @param userId Id of the user.
@@ -1862,6 +1962,10 @@ public final class UserManagerServiceMockedTest { 
        when(mTelecomManager.isInCall()).thenReturn(isInCall);

    }



    private void mockCallingUserId(@UserIdInt int userId) {

        doReturn(userId).when(UserHandle::getCallingUserId);

    }



    private void expectUserJourneyLogged(@UserIdInt int userId, @UserJourney int journey) {

        verify(mUserJourneyLogger).logUserJourneyBegin(userId, journey);

    }
@@ -1871,22 +1975,50 @@ public final class UserManagerServiceMockedTest { 
    }



    private void addDefaultProfileAndParent() {

        addUser(PARENT_USER_ID);

        addProfile(PROFILE_USER_ID, PARENT_USER_ID);

        addSecondaryUser(PARENT_USER_ID);

        addProfile(PROFILE_USER_ID, PARENT_USER_ID, /* userType= */ null);

    }



    private void addProfile(@UserIdInt int profileId, @UserIdInt int parentId) {

    private void addProfile(@UserIdInt int profileId, @UserIdInt int parentId, String userType) {

        TestUserData profileData = new TestUserData(profileId);

        profileData.info.flags = UserInfo.FLAG_PROFILE;

        profileData.info.profileGroupId = parentId;

        profileData.info.userType = userType;

        addUserData(profileData);



        assertWithMessage("user (id %s) retrieved after being added is not an admin", profileId)

            .that(mUsers.get(profileId).info.isAdmin()).isFalse();

    }



    private void addRestrictedProfile(@UserIdInt int profileId) {

        TestUserData profileData = new TestUserData(profileId);

        profileData.info.flags = UserInfo.FLAG_FULL;

        profileData.info.userType = USER_TYPE_FULL_RESTRICTED;

        addUserData(profileData);



        assertWithMessage("user (id %s) retrieved after being added is not an admin", profileId)

            .that(mUsers.get(profileId).info.isAdmin()).isFalse();

    }



    private void addUser(@UserIdInt int userId) {

    /** Adds a full secondary non-admin user. */

    private void addSecondaryUser(@UserIdInt int userId) {

        TestUserData userData = new TestUserData(userId);

        userData.info.flags = UserInfo.FLAG_FULL;

        userData.info.userType = USER_TYPE_FULL_SECONDARY;

        addUserData(userData);



        assertWithMessage("user (id %s) retrieved after being added is not an admin", userId)

            .that(mUsers.get(userId).info.isAdmin()).isFalse();

    }



    private void addGuestUser(@UserIdInt int userId) {

        TestUserData userData = new TestUserData(userId);

        userData.info.flags = UserInfo.FLAG_GUEST;

        userData.info.userType = UserManager.USER_TYPE_FULL_GUEST;

        addUserData(userData);



        assertWithMessage("user (id %s) retrieved after being added is not an admin", userId)

            .that(mUsers.get(userId).info.isAdmin()).isFalse();

    }



    private void assumeMainUserIsNotTheSystemUser() {
@@ -1950,7 +2082,11 @@ public final class UserManagerServiceMockedTest { 
    private void addAdminUser(@UserIdInt int userId) {

        TestUserData userData = new TestUserData(userId);

        userData.info.flags = UserInfo.FLAG_FULL | UserInfo.FLAG_ADMIN;

        userData.info.userType = USER_TYPE_FULL_SECONDARY;

        addUserData(userData);



        assertWithMessage("user (id %s) retrieved after being added is an admin", userId)

            .that(mUsers.get(userId).info.isAdmin()).isTrue();

    }



    private UserInfo addDyingUser(UserInfo user) {

services/tests/servicestests/src/com/android/server/pm/UserManagerTest.java

+0 −139
Original line number Diff line number Diff line
@@ -1096,145 +1096,6 @@ public final class UserManagerTest { 
        assertThat(guestsFound).isEmpty();

    }



    @MediumTest

    @Test

    public void testSetUserAdmin() throws Exception {

        UserInfo userInfo = createUser("SecondaryUser", /*flags=*/ 0);

        assertThat(userInfo.isAdmin()).isFalse();



        mUserManager.setUserAdmin(userInfo.id);



        userInfo = mUserManager.getUserInfo(userInfo.id);

        assertThat(userInfo.isAdmin()).isTrue();

    }



    @MediumTest

    @Test

    @RequiresFlagsEnabled(android.multiuser.Flags.FLAG_UNICORN_MODE_REFACTORING_FOR_HSUM_READ_ONLY)

    public void testSetUserAdminThrowsSecurityException() throws Exception {

        UserInfo targetUser = createUser("SecondaryUser", /*flags=*/ 0);

        assertThat(targetUser.isAdmin()).isFalse();



        try {

            // 1. Target User Restriction

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true,

                    targetUser.getUserHandle());

            assertThrows(SecurityException.class, () -> mUserManager.setUserAdmin(targetUser.id));



            // 2. Current User Restriction

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false,

                    targetUser.getUserHandle());

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true,

                    mContext.getUser());

            assertThrows(SecurityException.class, () -> mUserManager.setUserAdmin(targetUser.id));



        } finally {

            // Ensure restriction is removed even if test fails

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false,

                    targetUser.getUserHandle());

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false,

                    mContext.getUser());

        }

    }



    @MediumTest

    @Test

    public void testSetUserAdminFailsForGuest() throws Exception {

        UserInfo userInfo = createUser("GuestUser", UserInfo.FLAG_GUEST);

        assertThat(userInfo).isNotNull();



        mUserManager.setUserAdmin(userInfo.id);

        userInfo = mUserManager.getUserInfo(userInfo.id);

        assertThat(userInfo.isAdmin()).isFalse();

    }



    @MediumTest

    @Test

    public void testSetUserAdminFailsForProfile() throws Exception {

        UserHandle mainUser = mUserManager.getMainUser();

        assertThat(mainUser).isNotNull();

        UserInfo userInfo = createProfileForUser("Profile",

                UserManager.USER_TYPE_PROFILE_MANAGED, mainUser.getIdentifier());

        assertThat(userInfo).isNotNull();



        mUserManager.setUserAdmin(userInfo.id);

        userInfo = mUserManager.getUserInfo(userInfo.id);

        assertThat(userInfo.isAdmin()).isFalse();

    }



    @MediumTest

    @Test

    public void testSetUserAdminFailsForRestrictedProfile() throws Exception {

        UserInfo userInfo = createRestrictedProfile("Profile");

        assertThat(userInfo).isNotNull();



        mUserManager.setUserAdmin(userInfo.id);

        userInfo = mUserManager.getUserInfo(userInfo.id);

        assertThat(userInfo.isAdmin()).isFalse();

    }



    @MediumTest

    @Test

    public void testRevokeUserAdmin() throws Exception {

        UserInfo userInfo = createUser("Admin", /*flags=*/ UserInfo.FLAG_ADMIN);

        assertThat(userInfo.isAdmin()).isTrue();



        mUserManager.revokeUserAdmin(userInfo.id);



        userInfo = mUserManager.getUserInfo(userInfo.id);

        assertThat(userInfo.isAdmin()).isFalse();

    }



    @MediumTest

    @Test

    public void testRevokeUserAdminFromNonAdmin() throws Exception {

        UserInfo userInfo = createUser("NonAdmin", /*flags=*/ 0);

        assertThat(userInfo.isAdmin()).isFalse();



        mUserManager.revokeUserAdmin(userInfo.id);



        userInfo = mUserManager.getUserInfo(userInfo.id);

        assertThat(userInfo.isAdmin()).isFalse();

    }



    @MediumTest

    @Test

    @RequiresFlagsEnabled(android.multiuser.Flags.FLAG_UNICORN_MODE_REFACTORING_FOR_HSUM_READ_ONLY)

    public void testRevokeUserAdminThrowsSecurityException() throws Exception {

        UserInfo targetUser = createUser("SecondaryUser", /*flags=*/ 0);

        assertThat(targetUser.isAdmin()).isFalse();



        try {

            // 1. Target User Restriction

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true,

                    targetUser.getUserHandle());

            assertThrows(SecurityException.class, () -> mUserManager

                    .revokeUserAdmin(targetUser.id));



            // 2. Current User Restriction

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false,

                    targetUser.getUserHandle());

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, true,

                    mContext.getUser());

            assertThrows(SecurityException.class, () -> mUserManager

                    .revokeUserAdmin(targetUser.id));



        } finally {

            // Ensure restriction is removed even if test fails

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false,

                    targetUser.getUserHandle());

            mUserManager.setUserRestriction(UserManager.DISALLOW_GRANT_ADMIN, false,

                    mContext.getUser());

        }

    }



    @MediumTest

    @Test

    public void testRevokeUserAdminFailsForSystemUser() throws Exception {

        mUserManager.revokeUserAdmin(UserHandle.USER_SYSTEM);

        assertThat(getUser(UserHandle.USER_SYSTEM).isAdmin()).isTrue();

    }



    @MediumTest

    @Test

    public void testGetProfileParent() throws Exception {