Add identity.email permission for apps and extensions

Apps or extensions with the identity.email permission will be able to
query for the email addresses of accounts signed into a Chrome profile.

BUG=368343

Review URL: https://codereview.chromium.org/328013002

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@276891 0039d316-1c4b-4281-b951-d872f2087c98

chrome/app/generated_resources.grd

@@ -4362,6 +4362,9 @@ Make sure you do not expose any sensitive information.
       <message name="IDS_EXTENSION_PROMPT_WARNING_DOWNLOADS_OPEN" desc="Permission string for access to downloads.">
         Open downloaded files
       </message>
+      <message name="IDS_EXTENSION_PROMPT_WARNING_IDENTITY_EMAIL" desc="Permission string for access to profile email address.">
+        View email addresses signed in to your profile
+      </message>
       <message name="IDS_EXTENSION_PROMPT_WARNING_WALLPAPER" desc="Permission string for access to wallpaper.">
         Change your wallpaper
       </message>

chrome/common/extensions/api/_permission_features.json

@@ -508,6 +508,10 @@
     "channel": "stable",
     "extension_types": ["extension", "platform_app"]
   },
+  "identity.email": {
+    "channel": "dev",
+    "extension_types": ["extension", "platform_app"]
+  },
   "identityPrivate": {
     "channel": "stable",
     "extension_types": [

chrome/common/extensions/permissions/chrome_api_permissions.cc

@@ -56,6 +56,10 @@ std::vector<APIPermissionInfo*> ChromeAPIPermissions::GetAllPermissions()
        PermissionMessage::kDownloadsOpen},
       {APIPermission::kDownloadsShelf, "downloads.shelf"},
       {APIPermission::kIdentity, "identity"},
+      {APIPermission::kIdentityEmail, "identity.email",
+       APIPermissionInfo::kFlagNone,
+       IDS_EXTENSION_PROMPT_WARNING_IDENTITY_EMAIL,
+       PermissionMessage::kIdentityEmail},
       {APIPermission::kExperimental, "experimental",
        APIPermissionInfo::kFlagCannotBeOptional},
       // NOTE(kalman): this is provided by a manifest property but needs to

extensions/common/permissions/api_permission.h

@@ -100,6 +100,7 @@ class APIPermission {
     kHomepage,
     kHotwordPrivate,
     kIdentity,
+    kIdentityEmail,
     kIdentityPrivate,
     kIdltest,
     kIdle,

extensions/common/permissions/permission_message.h

@@ -85,6 +85,7 @@ class PermissionMessage {
     kAccessibilityFeaturesModify,
     kAccessibilityFeaturesRead,
     kBluetoothPrivate,
+    kIdentityEmail,
     kEnumBoundary,
   };
   COMPILE_ASSERT(PermissionMessage::kNone > PermissionMessage::kUnknown,