Skip to content

GitLab

T
tangled
Commit 5eb1c0d8 authored by Thiemo Nagel's avatar Thiemo Nagel Committed by Commit Bot
Browse files
Options

Clarify MGS permission warning flags 

Adjusting Managed Guest Session (MGS) permission warning flags according
to consensus between commercial and privacy teams.

Due to privacy concerns, removing whitelisting for permissions that
provide direct access to user data. Further, to reduce scope, removing
unnecessarry whitelisting for permissions of the following categories:
* private/internal
* lacking public documentation
* non-stable channel or otherwise experimental or deprecated
* inapplicable to MGS, e.g. kiosk-specific permissions

Bug: 1015378
Change-Id: Id677c8639d94cc1b6478d5bf9b469648d202ce04
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2124266
Commit-Queue: Thiemo Nagel <tnagel@chromium.org>
Reviewed-by: default avatarDevlin <rdevlin.cronin@chromium.org>
Reviewed-by: default avatarAvi Drissman <avi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#754964}
parent c5055b1e
Hide whitespace changes
Inline Side-by-side
Showing with 87 additions and 193 deletions
chrome/common/apps/platform_apps/chrome_apps_api_permissions.cc
View file @ 5eb1c0d8
......@@ -26,27 +26,18 @@ constexpr extensions::APIPermissionInfo::InitInfo permissions_to_register[] = {
extensions::APIPermissionInfo::
kFlagDoesNotRequireManagedSessionFullLoginWarning},
{extensions::APIPermission::kFirstRunPrivate, "firstRunPrivate",
extensions::APIPermissionInfo::kFlagCannotBeOptional |
extensions::APIPermissionInfo::
kFlagDoesNotRequireManagedSessionFullLoginWarning},
extensions::APIPermissionInfo::kFlagCannotBeOptional},
{extensions::APIPermission::kMusicManagerPrivate, "musicManagerPrivate",
extensions::APIPermissionInfo::kFlagCannotBeOptional |
extensions::APIPermissionInfo::
kFlagDoesNotRequireManagedSessionFullLoginWarning},
extensions::APIPermissionInfo::kFlagCannotBeOptional},
{extensions::APIPermission::kMediaGalleries, "mediaGalleries",
extensions::APIPermissionInfo::
kFlagDoesNotRequireManagedSessionFullLoginWarning,
extensions::APIPermissionInfo::kFlagNone,
&CreateAPIPermission<chrome_apps::MediaGalleriesPermission>},
{extensions::APIPermission::kPointerLock, "pointerLock",
extensions::APIPermissionInfo::
kFlagDoesNotRequireManagedSessionFullLoginWarning},
{extensions::APIPermission::kSyncFileSystem, "syncFileSystem",
extensions::APIPermissionInfo::
kFlagDoesNotRequireManagedSessionFullLoginWarning},
{extensions::APIPermission::kSyncFileSystem, "syncFileSystem"},
{extensions::APIPermission::kWebstoreWidgetPrivate, "webstoreWidgetPrivate",
extensions::APIPermissionInfo::kFlagCannotBeOptional |
extensions::APIPermissionInfo::
kFlagDoesNotRequireManagedSessionFullLoginWarning},
extensions::APIPermissionInfo::kFlagCannotBeOptional},
};
} // namespace
......
chrome/common/extensions/manifest_handlers/ui_overrides_handler.cc
View file @ 5eb1c0d8
......@@ -86,8 +86,6 @@ class UIOverridesHandler::ManifestPermissionImpl : public ManifestPermission {
bool RequiresManagementUIWarning() const override { return false; }
bool RequiresManagedSessionFullLoginWarning() const override { return false; }
private:
bool override_bookmarks_ui_permission_;
};
......
chrome/common/extensions/permissions/chrome_api_permissions.cc
View file @ 5eb1c0d8
......@@ -35,12 +35,10 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kDeclarativeContent, "declarativeContent"},
{APIPermission::kDesktopCapture, "desktopCapture"},
{APIPermission::kDesktopCapturePrivate, "desktopCapturePrivate",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kDesktopCapturePrivate, "desktopCapturePrivate"},
{APIPermission::kDownloads, "downloads"},
{APIPermission::kDownloadsOpen, "downloads.open"},
{APIPermission::kDownloadsShelf, "downloads.shelf",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kDownloadsShelf, "downloads.shelf"},
{APIPermission::kIdentity, "identity"},
{APIPermission::kIdentityEmail, "identity.email"},
{APIPermission::kExperimental, "experimental",
......@@ -58,13 +56,11 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kAccessibilityFeaturesRead, "accessibilityFeatures.read"},
{APIPermission::kAccessibilityPrivate, "accessibilityPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kActiveTab, "activeTab"},
{APIPermission::kBookmark, "bookmarks"},
{APIPermission::kBrailleDisplayPrivate, "brailleDisplayPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kBrowsingData, "browsingData",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCertificateProvider, "certificateProvider",
......@@ -72,14 +68,11 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
{APIPermission::kContentSettings, "contentSettings"},
{APIPermission::kContextMenus, "contextMenus",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCookie, "cookies",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCryptotokenPrivate, "cryptotokenPrivate",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCookie, "cookies"},
{APIPermission::kCryptotokenPrivate, "cryptotokenPrivate"},
{APIPermission::kDataReductionProxy, "dataReductionProxy",
APIPermissionInfo::kFlagImpliesFullURLAccess |
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kEnterpriseDeviceAttributes, "enterprise.deviceAttributes",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kEnterpriseHardwarePlatform, "enterprise.hardwarePlatform",
......@@ -112,8 +105,7 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
{APIPermission::kTopSites, "topSites",
APIPermissionInfo::kFlagRequiresManagementUIWarning},
{APIPermission::kTransientBackground, "transientBackground",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kTts, "tts", APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kTtsEngine, "ttsEngine",
APIPermissionInfo::kFlagCannotBeOptional},
......@@ -125,121 +117,82 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
// Register private permissions.
{APIPermission::kActivityLogPrivate, "activityLogPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kAutoTestPrivate, "autotestPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kBookmarkManagerPrivate, "bookmarkManagerPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kCast, "cast", APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kChromeosInfoPrivate, "chromeosInfoPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kCommandsAccessibility, "commands.accessibility",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kCommandLinePrivate, "commandLinePrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kDeveloperPrivate, "developerPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kDownloadsInternal, "downloadsInternal",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kDownloadsInternal, "downloadsInternal"},
{APIPermission::kFileBrowserHandlerInternal, "fileBrowserHandlerInternal",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kFileManagerPrivate, "fileManagerPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kIdentityPrivate, "identityPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kWebcamPrivate, "webcamPrivate",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWebcamPrivate, "webcamPrivate"},
{APIPermission::kMediaPlayerPrivate, "mediaPlayerPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kMediaRouterPrivate, "mediaRouterPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kNetworkingCastPrivate, "networking.castPrivate",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kNetworkingCastPrivate, "networking.castPrivate"},
{APIPermission::kSystemPrivate, "systemPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kCloudPrintPrivate, "cloudPrintPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kInputMethodPrivate, "inputMethodPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kEchoPrivate, "echoPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kImageWriterPrivate, "imageWriterPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kRtcPrivate, "rtcPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kTerminalPrivate, "terminalPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kVirtualKeyboardPrivate, "virtualKeyboardPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWallpaperPrivate, "wallpaperPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWebstorePrivate, "webstorePrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kEnterprisePlatformKeysPrivate,
"enterprise.platformKeysPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kEnterpriseReportingPrivate, "enterprise.reportingPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWebrtcAudioPrivate, "webrtcAudioPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWebrtcDesktopCapturePrivate, "webrtcDesktopCapturePrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWebrtcLoggingPrivate, "webrtcLoggingPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWebrtcLoggingPrivateAudioDebug,
"webrtcLoggingPrivate.audioDebug",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kSettingsPrivate, "settingsPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kAutofillAssistantPrivate, "autofillAssistantPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kAutofillPrivate, "autofillPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kPasswordsPrivate, "passwordsPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kUsersPrivate, "usersPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kLanguageSettingsPrivate, "languageSettingsPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kResourcesPrivate, "resourcesPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kSafeBrowsingPrivate, "safeBrowsingPrivate",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kSafeBrowsingPrivate, "safeBrowsingPrivate"},
// Full url access permissions.
{APIPermission::kDebugger, "debugger",
......@@ -261,13 +214,10 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
APIPermissionInfo::kFlagCannotBeOptional},
// Platform-app permissions.
{APIPermission::kFileSystemProvider, "fileSystemProvider",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCastStreaming, "cast.streaming",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kLauncherSearchProvider, "launcherSearchProvider",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCastStreaming, "cast.streaming"},
{APIPermission::kLauncherSearchProvider, "launcherSearchProvider"},
// Settings override permissions.
{APIPermission::kHomepage, "homepage",
......
extensions/common/api/bluetooth/bluetooth_manifest_permission.cc
View file @ 5eb1c0d8
......@@ -195,9 +195,4 @@ bool BluetoothManifestPermission::RequiresManagementUIWarning() const {
return false;
}
bool BluetoothManifestPermission::RequiresManagedSessionFullLoginWarning()
const {
return false;
}
} // namespace extensions
extensions/common/api/bluetooth/bluetooth_manifest_permission.h
View file @ 5eb1c0d8
......@@ -54,7 +54,6 @@ class BluetoothManifestPermission : public ManifestPermission {
std::unique_ptr<ManifestPermission> Intersect(
const ManifestPermission* rhs) const override;
bool RequiresManagementUIWarning() const override;
bool RequiresManagedSessionFullLoginWarning() const override;
const BluetoothUuidSet& uuids() const {
return uuids_;
......
extensions/common/manifest_handlers/automation.cc
View file @ 5eb1c0d8
......@@ -66,8 +66,6 @@ class AutomationManifestPermission : public ManifestPermission {
bool RequiresManagementUIWarning() const override;
bool RequiresManagedSessionFullLoginWarning() const override;
private:
std::unique_ptr<const AutomationInfo> automation_info_;
};
......@@ -166,11 +164,6 @@ bool AutomationManifestPermission::RequiresManagementUIWarning() const {
return automation_info_->desktop || !automation_info_->matches.is_empty();
}
bool AutomationManifestPermission::RequiresManagedSessionFullLoginWarning()
const {
return automation_info_->desktop || !automation_info_->matches.is_empty();
}
AutomationHandler::AutomationHandler() = default;
AutomationHandler::~AutomationHandler() = default;
......
extensions/common/permissions/extensions_api_permissions.cc
View file @ 5eb1c0d8
......@@ -39,37 +39,29 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kAudio, "audio",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kAudioCapture, "audioCapture",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kAudioCapture, "audioCapture"},
{APIPermission::kBluetoothPrivate, "bluetoothPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kCecPrivate, "cecPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kClipboard, "clipboard",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kClipboard, "clipboard"},
{APIPermission::kClipboardRead, "clipboardRead",
APIPermissionInfo::kFlagSupportsContentCapabilities},
{APIPermission::kClipboardWrite, "clipboardWrite",
APIPermissionInfo::kFlagSupportsContentCapabilities |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCrashReportPrivate, "crashReportPrivate",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kCrashReportPrivate, "crashReportPrivate"},
{APIPermission::kDeclarativeWebRequest, "declarativeWebRequest"},
{APIPermission::kDiagnostics, "diagnostics",
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kDisplaySource, "displaySource",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kDns, "dns",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kDisplaySource, "displaySource"},
{APIPermission::kDns, "dns"},
{APIPermission::kDocumentScan, "documentScan"},
{APIPermission::kExternallyConnectableAllUrls,
"externally_connectable.all_urls",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kFeedbackPrivate, "feedbackPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kFullscreen, "app.window.fullscreen",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
......@@ -83,62 +75,47 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
{APIPermission::kFileSystemDirectory, "fileSystem.directory",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kFileSystemRequestFileSystem,
"fileSystem.requestFileSystem",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
"fileSystem.requestFileSystem"},
{APIPermission::kFileSystemRetainEntries, "fileSystem.retainEntries",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kFileSystemWrite, "fileSystem.write",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kHid, "hid",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kImeWindowEnabled, "app.window.ime",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kHid, "hid"},
{APIPermission::kImeWindowEnabled, "app.window.ime"},
{APIPermission::kOverrideEscFullscreen, "app.window.fullscreen.overrideEsc",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kIdle, "idle",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kLockScreen, "lockScreen",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kLockScreen, "lockScreen"},
{APIPermission::kLockWindowFullscreenPrivate, "lockWindowFullscreenPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kLogin, "login",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kLoginScreenStorage, "loginScreenStorage",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kLoginScreenUi, "loginScreenUi",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kLogin, "login"},
{APIPermission::kLoginScreenStorage, "loginScreenStorage"},
{APIPermission::kLoginScreenUi, "loginScreenUi"},
{APIPermission::kLoginState, "loginState",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kMediaPerceptionPrivate, "mediaPerceptionPrivate",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kMediaPerceptionPrivate, "mediaPerceptionPrivate"},
{APIPermission::kMetricsPrivate, "metricsPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kNativeMessaging, "nativeMessaging",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kNetworkingConfig, "networking.config",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kNetworkingOnc, "networking.onc",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kNetworkingOnc, "networking.onc"},
{APIPermission::kNetworkingPrivate, "networkingPrivate",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kNewTabPageOverride, "newTabPageOverride",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagRequiresManagementUIWarning |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagRequiresManagementUIWarning},
{APIPermission::kPower, "power",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kPrinterProvider, "printerProvider",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kPrinting, "printing",
APIPermissionInfo::kFlagRequiresManagementUIWarning |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagRequiresManagementUIWarning},
{APIPermission::kPrintingMetrics, "printingMetrics",
APIPermissionInfo::kFlagRequiresManagementUIWarning |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagRequiresManagementUIWarning},
{APIPermission::kSerial, "serial",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kSocket, "socket",
......@@ -157,22 +134,18 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kSystemPowerSource, "system.powerSource",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kSystemStorage, "system.storage",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kU2fDevices, "u2fDevices",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kSystemStorage, "system.storage"},
{APIPermission::kU2fDevices, "u2fDevices"},
{APIPermission::kUnlimitedStorage, "unlimitedStorage",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagSupportsContentCapabilities |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kUsb, "usb", APIPermissionInfo::kFlagNone},
{APIPermission::kUsbDevice, "usbDevices",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning,
extensions::APIPermissionInfo::kFlagNone,
&CreateAPIPermission<UsbDevicePermission>},
{APIPermission::kVideoCapture, "videoCapture",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kVirtualKeyboard, "virtualKeyboard",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kVideoCapture, "videoCapture"},
{APIPermission::kVirtualKeyboard, "virtualKeyboard"},
{APIPermission::kVpnProvider, "vpnProvider",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
......@@ -183,19 +156,14 @@ constexpr APIPermissionInfo::InitInfo permissions_to_register[] = {
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagInternal},
{APIPermission::kWebRequest, "webRequest"},
{APIPermission::kWebRequestBlocking, "webRequestBlocking",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kWebRequestBlocking, "webRequestBlocking"},
{APIPermission::kDeclarativeNetRequest,
declarative_net_request::kAPIPermission,
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWebView, "webview",
APIPermissionInfo::kFlagCannotBeOptional |
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kWindowShape, "app.window.shape",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
{APIPermission::kFileSystemRequestDownloads, "fileSystem.requestDownloads",
APIPermissionInfo::kFlagDoesNotRequireManagedSessionFullLoginWarning},
APIPermissionInfo::kFlagCannotBeOptional},
{APIPermission::kWindowShape, "app.window.shape"},
{APIPermission::kFileSystemRequestDownloads, "fileSystem.requestDownloads"},
{APIPermission::kDeclarativeNetRequestFeedback,
declarative_net_request::kFeedbackAPIPermission,
APIPermissionInfo::kFlagRequiresManagementUIWarning},
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment