diff options
| author | 2024-08-05 19:21:29 +0100 | |
|---|---|---|
| committer | 2024-08-08 15:45:17 +0100 | |
| commit | adc3add3ae44fc2a735c31c21975b309f7186560 (patch) | |
| tree | 9a605c9c661f9e036eed145bf5c3de95ee157a91 /libs/androidfw/AttributeResolution.cpp | |
| parent | cc25ceda6da20b4d12d29b4295afb78461ff73a9 (diff) | |
Implement DISALLOW_GRANT_ADMIN restriction in UserManager APIs
Implement access restriction based on "DISALLOW_GRANT_ADMIN" restriction for preventing the use of setUserAdmin and revokeUserAdmin functions.
This change is particularly important for child unicorn users who have this restriction in place. It guarantees that they are never elevated to admin privileges or grant admin access to others.
Also implemented the same restriction in the createUser flow to restrict the child users having DISALLOW_GRANT_ADMIN restrictions in place to create new ADMIN users.
Bug: 357636075
Test: UserMangerTest -c
Flag: android.multiuser.unicorn_mode_refactoring_for_hsum_read_only
Change-Id: I69bd4bf34c8c3a21947637d3246c5b9e280d5833
Diffstat (limited to 'libs/androidfw/AttributeResolution.cpp')
0 files changed, 0 insertions, 0 deletions