diff options
author | TreeHugger Robot <treehugger-gerrit@google.com> | 2022-10-08 11:41:10 +0000 |
---|---|---|
committer | Android (Google) Code Review <android-gerrit@google.com> | 2022-10-08 11:41:10 +0000 |
commit | 62044e5099438397e32730cc5ff34fb4d6c4fd1d (patch) | |
tree | ddee8ef4c5130db3caa1516025f26f7b09b15965 | |
parent | 459808b2c0535b1b2768ad70c7c7eaab44ceecf1 (diff) | |
parent | d5146f80cc7aca4e3ce202911a433dea88549c4e (diff) | |
download | base-62044e5099438397e32730cc5ff34fb4d6c4fd1d.tar.gz |
Merge "Stop managed profile owner granting READ_SMS" into qt-dev
-rw-r--r-- | core/java/android/app/admin/DevicePolicyManager.java | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/core/java/android/app/admin/DevicePolicyManager.java b/core/java/android/app/admin/DevicePolicyManager.java index 14587053435a..c3e777f584ed 100644 --- a/core/java/android/app/admin/DevicePolicyManager.java +++ b/core/java/android/app/admin/DevicePolicyManager.java @@ -8836,6 +8836,15 @@ public class DevicePolicyManager { * {@link android.os.Build.VERSION_CODES#M} the app-op matching the permission is set to * {@link android.app.AppOpsManager#MODE_IGNORED}, but the permission stays granted. * + * Control over the following permissions are restricted for managed profile owners: + * <ul> + * <li>Manifest.permission.READ_SMS</li> + * </ul> + * <p> + * A managed profile owner may not grant these permissions (i.e. call this method with any of + * the permissions listed above and {@code grantState} of + * {@code #PERMISSION_GRANT_STATE_GRANTED}), but may deny them. + * * @param admin Which profile or device owner this request is associated with. * @param packageName The application to grant or revoke a permission to. * @param permission The permission to grant or revoke. |