Add extra permissions to CalendarProvider.
Per requirement of cross profile calendar feature, CalendarProvider will need MANAGE_USER to get work profile user, and INTERACT_WITH_USER to access its work profile equivalent. Personal CalendarProvider needs to get the corp user ID, so it needs to call userManager.getUsers() which requires {@link android.Manifest.permission#MANAGE_USERS} permission. We'll maintain a whitelist of packages set by DPC that are granted access to cross profile Uris in CalendarProvider, so random personal apps won't be able to access those Uris. Bug: 118456304 Test: manual Change-Id: I59e4a7f39f9abc69f0dcc7ff03d822b8d44b4dbc
Loading
Please register or sign in to comment