summaryrefslogtreecommitdiff
path: root/PermissionController
AgeCommit message (Collapse)Author
2025-09-18[SP 2025-09-01] Stop one-time sessions iff when no one-time permission is ↵banksia-dev mrulhania
granted Stoping the session on one of one-time permission revoke termintes the only session running for all one time permission grants. We need to stop the session when no permission is granted as one time. Bug: 419105158 Test: manual Flag: EXEMPT bug fix LOW_COVERAGE_REASON=NON_CODE_ONLY Relnote: security bug fix (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2b7a2c80f69a80163d35f45b5300d400884945a0) Merged-In: I59d6f13e23e326b055e0221da52bb22bd54de5d7 Change-Id: I59d6f13e23e326b055e0221da52bb22bd54de5d7
2025-04-12Import translations. DO NOT MERGE ANYWHERE Bill Yi
Auto-generated-cl: translation import Bug: 408276020 (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:5b8772d993e99f0a5cee7b56a618268374eea3b3) Merged-In: I758712b7fe97f704997a728fc95edc37794e9395 Change-Id: I758712b7fe97f704997a728fc95edc37794e9395
2025-04-10Revert "Add READ/WRITE_SYSTEM_PREFERENCES permissions to ASSISTANT role" Chris Antol
This reverts commit 0b3022e555fdf158dbdcc5171e24e1c574e0a9fe. Reason for revert: b/409604217 Relnote: N/A NO_IFTTT=not applicable (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:0c8729509e4e444734e4d8827ad4e5b29b14fc62) Merged-In: Iab3a924bb0d9a2b81e19ec04d74c50491a062faa Change-Id: Iab3a924bb0d9a2b81e19ec04d74c50491a062faa
2025-04-02Import translations. DO NOT MERGE ANYWHERE Bill Yi
Auto-generated-cl: translation import Bug: 406841318 (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:4dfd1df3f97486edbfdefbf3cfb235bdba18901c) Merged-In: Ib55f1be65e14d35f1e46c5cfa467b15a7f43f430 Change-Id: Ib55f1be65e14d35f1e46c5cfa467b15a7f43f430
2025-03-24Merge "Allow the SYSTEM_SUPERVISION role to be set for CTS" into main Jason Parks
2025-03-21Merge "Permissions: Fix admin restricted CTS Test." into main Justin Lannin
2025-03-21Permissions: Fix admin restricted CTS Test. Justin Lannin
The PermissionUsageViewModelTest in the test suite was adding a health permission to the platform list which was causing the HEALTH permission group to be considered restricted. When we checked with the group it would then always return restricted even before we added the permission we were checking to the list. Now we remove the explicit group from being passed in. The point of this test is mostly to ensure that permissions that are added to the list become restricted rather than being about health specifically. The inprocess tests cover the health permissions getting added. Bug: 403921690 Test: atest PermissionControllerMockingTests Flag: EXEMPT bugfix Relnote: N/A LOW_COVERAGE_REASON=TEST_ONLY Change-Id: Ibba609dbe28c637206f17f375e273888d565f5c9
2025-03-21Merge "[BC25] Add isExpressiveDesignEnabled to Utils" into main Yi-an Chen
2025-03-21[BC25] Add isExpressiveDesignEnabled to Utils Yi-an Chen
Add isExpressiveDesignEnabled to determine whether the expressive design is enabled to permission controller. Bug: 349675008 Flag: com.android.settingslib.widget.theme.flags.is_expressive_design_enabled Test: Build Relnote: N/A Change-Id: I139d954be115eb6031d2ce900b8aecc4795604b4
2025-03-21Allow the SYSTEM_SUPERVISION role to be set for CTS Jason Parks
Bug: 378102594 Flag: android.app.supervision.flags.supervision_manager_apis Test: atest CtsSupervisionTestCases Relnote: N/A Change-Id: Iec86b5423299ae0d43d5e40ff5184ede0a8095b6
2025-03-21Merge "Add the MTE policy to the shell roles" into main Eran Messeri
2025-03-21Add the MTE policy to the shell roles Eran Messeri
It is safe for the shell to have this permission because: * A human can query and modify the state of the Memory Tagging Extension policy via Developer Options. * If the device is managed and the user tries to disable MTE, there is an additional check in the DevicePolicyManagerService that only the device policy client (DPC) can disable MTE. Bug: 402456665 Test: atest CtsSecurityTestCases:android.security.cts.advancedprotection.MemoryTaggingExtensionTest Flag: EXEMPT bugfix Relnote: Adding the MANAGE_DEVICE_POLICY_MTE permission to the Shell for testing. LOW_COVERAGE_REASON=NON_CODE_ONLY Change-Id: I674b360342820cd159a66467bd332fe7a2f6d84a
2025-03-20Merge "WearAppPermissionGroupsHelper: Prioritize platform permissions on ↵ Justin Lannin
AppInfo page." into main
2025-03-20WearAppPermissionGroupsHelper: Prioritize platform permissions on AppInfo page. Justin Lannin
The HEALTH permission group is created by the healthfitness mainline module and not the OS_PKG. This meant that even though it is a platform permission group that it was getting sorted to the bottom of the list. Now we partition permissions based on whether they are platform permissions to ensure it takes it's rightful spot near the top. Bug: 404941005 Test: Locally built, verified ordering was fixed. Flag: EXEMPT bugfix Relnote: Fixing permission order on Wear App info page. LOW_COVERAGE_REASON=OTHER_FORM_FACTOR Change-Id: I33d901d330cd963494f83a0e4b778db3aebfb529
2025-03-20Merge "Support health split permission check for targetSdk<23 apps" into main Scarlett Song
2025-03-20Support health split permission check for targetSdk<23 apps Scarlett Song
Test: atest HealthConnectAppPermissionFragmentTest Bug: 403337565 Flag: android.permission.flags.replace_body_sensor_permission_enabled Relnote: Health permission split BODY_SENSORS to READ_HEART_RATE LOW_COVERAGE_REASON=b/405152547 Change-Id: I770fdf9a551bb53a6e0d7adccd39ea6bf285c57b
2025-03-20Merge "HealthFitness: Disable HealthFitness label tests until baseline build ↵ Scarlett Song
catches up" into main
2025-03-20HealthFitness: Disable HealthFitness label tests until baseline build catches up Scarlett Song
Recently part of permissions branding in HealthConnect is renamed to HealthFitness. The tests and mainline codes are updated, but the baseline build where the tests are run didn't catch up. To mitigate this issue for FRC date, we will temporarily disable these tests, and re-enable them post FRC when baseline build and HealthFitness mainline modules also catch up. Relnote: N/A Flag: EXEMPT test disabling Bug: 405152547 Bug: 405183811 Change-Id: Ib55b6ab920bef7fd493222b61cfd0d2e8c665bed
2025-03-20Merge "Rename the limited VDM role and permission" into main Vladimir Komsiyski
2025-03-20Merge "Replace flag check to sdk version check" into main Zhi Dou
2025-03-20Merge "Replace flag check to sdk version check" into main Zhi Dou
2025-03-19Replace flag check to sdk version check Zhi Dou
This change replace flag check to sdk version check to fix the problem that when the new module is installed on the new version of mainline the exported flags will have inconsistent flag value. Test: atest PermissionControllerMockingTests GtsPermissionUiTestCases Bug: 401592182 Flag: EXEMPT remove flag call Relnote: M05 Change-Id: Ieb5245856d0c306870edd4211d206af8f979445f
2025-03-19Merge "Wear: Hide health group if not requesting system permissions." into main Justin Lannin
2025-03-19Merge "Import translations. DO NOT MERGE ANYWHERE" into main Bill Yi
2025-03-19Wear: Hide health group if not requesting system permissions. Justin Lannin
This fixes a corner case where if a Wear app is only requesting non-system health permissions, the chip should not be shown. As a consequence this would hide apps only requesting something invalid on Wear like READ_STEPS. This would also hide apps only requesting READ_HEALTH_DATA_IN_BACKGROUND. Bug: 401089783 Test: Local test with app only requesting non-system permissions. See that the chip is hidden. Flag: android.permission.flags.replace_body_sensor_permission_enabled Change-Id: Id2533e06ee9e6df30c5bf2bbdeba04e427810027 Relnote: Fix health chip shown corner case on Wear.
2025-03-19Replace flag check to sdk version check Zhi Dou
This change replace flag check to sdk version check to fix the problem that when the new module is installed on the new version of mainline the exported flags will have inconsistent flag value. Test: m Flag: EXEMPT remove flag call Relnote: M0 Bug: 401592182 Change-Id: I986e9c9b965683a4bbc50319980cdf035fa30a1c
2025-03-19Replace flag check to sdk version check Zhi Dou
This change replace flag check to sdk version check to fix the problem that when the new module is installed on the new version of mainline the exported flags will have inconsistent flag value. Test: m Flag: EXEMPT remove flag call Relnote: M0 Bug: 401592182 Change-Id: Ib768880af8eddc96db44a35860042e1e0a0d99a7
2025-03-19Merge "Adapt health permission changes to HealthConnect rebranding" into main Scarlett Song
2025-03-19Merge "Mirror chevron arrow in safety center quick settings" into main Treehugger Robot
2025-03-18Import translations. DO NOT MERGE ANYWHERE Bill Yi
Auto-generated-cl: translation import Change-Id: I5fa2465415f30138cfc7483480f2506afe12fa48
2025-03-18Mirror chevron arrow in safety center quick settings Nate Myren
In RTL languages, the arrow should point left, not right Fixes: 401865911 Test: manual Flag: EXEMPT mainline fix Relnote: Minor visual fix LOW_COVERAGE_REASON=NON_CODE_ONLY Change-Id: I560df580a0f5f25dd3585679ec6c2e80cc46a183
2025-03-18Dismiss keygaurd in PermissionController UI tests Nate Myren
Necessary to properly run the tests Bug: 388406787 Test: atest PermissionUiTestCases Flag: EXEMPT Test fix Relnote: N/A LOW_COVERAGE_REASON=NON_CODE_ONLY Change-Id: Iaa9848f8b67e864978e7ca1e16e9514f0d6ec3b5
2025-03-17Merge "Making Grant Screen to use SLC." into main Vignesh Ramanathan
2025-03-17Making Grant Screen to use SLC. vignesh ramanathan
Bug: b/391709066 Relnote: "N/A" FLAG: EXEMPT refactor Test: Build Succeeds. Existing CTS tests passes. Change-Id: I53c5a864cbc1fe08fcde7cb95a6c6895d038f7d7 LOW_COVERAGE_REASON=OTHER_FORM_FACTOR
2025-03-15Rename the limited VDM role and permission Vladimir Komsiyski
Bug: 368633836 Test: presubmit Relnote: n/a LOW_COVERAGE_REASON=NON_CODE_ONLY Flag: android.companion.virtualdevice.flags.enable_limited_vdm_role Change-Id: I4f71eccabf3b746767d70092cdf3591d944efe20
2025-03-14Adapt health permission changes to HealthConnect rebranding Scarlett Song
In Baklava HealthConnect will rename to Health, Fitness and Wellness on phone. Update PC tests so that postsubmits won't break. Bug: 398254036 Flag: EXEMPT guard by sdk Test: atest HealthConnectAllAppPermissionFragmentTest, atest HealthConnectAppPermissionFragmentTest Change-Id: I659105c9556c3d51ed98409a6d03032e1b15f95d
2025-03-14Merge "Import translations. DO NOT MERGE ANYWHERE" into main Bill Yi
2025-03-14Merge "WearPermissionButtonStyle: Add Warning style" into main Scarlett Song
2025-03-14WearPermissionButtonStyle: Add Warning style Scarlett Song
This cl adds a WearPermissionButtonStyle Warning to support a red background button. Test: Local build verify behavior. LOW_COVERAGE_REASON=NON_CODE_ONLY Bug: 382492405 Change-Id: Ic38ea81e2f80583553923abb62a2ffc7a3f2b2c1
2025-03-13Import translations. DO NOT MERGE ANYWHERE Bill Yi
Auto-generated-cl: translation import Change-Id: I08da8140e1e79425762d8e78579ca9a2adc74d94
2025-03-13Merge "Wear: Enable auto hyphenating on wear toggleable chips." into main Justin Lannin
2025-03-13Wear: Enable auto hyphenating on wear toggleable chips. Justin Lannin
Bug: 389592634 Test: Built locally and saw hyphened words on multiple lines. Flag: EXEMPT bugfix Change-Id: I1245921272fa78e488d255bb7d1d469b769f95c2 Relnote: Support auto-hyphenation on Wear toggleable chips. LOW_COVERAGE_REASON=OTHER_FORM_FACTOR
2025-03-12Merge "Import translations. DO NOT MERGE ANYWHERE" into main Bill Yi
2025-03-11Merge "Support soft hyphens in button subtitle" into main Vignesh Ramanathan
2025-03-11Import translations. DO NOT MERGE ANYWHERE Bill Yi
Auto-generated-cl: translation import Change-Id: I54cf5cc2b0069e672da674cf9059b4e02f2aedec
2025-03-11Merge "Replace allowPrivateProfile flag with sdk version check" into main Treehugger Robot
2025-03-11Support soft hyphens in button subtitle vignesh ramanathan
Bug: b/342445155 Relnote: "N/A" FLAG: EXEMPT refactor Test: Build Succeeds. Existing CTS tests passes. Change-Id: Id060b68c3a77b280c39b9cd5148b1f0259107105 LOW_COVERAGE_REASON=OTHER_FORM_FACTOR
2025-03-11Replace allowPrivateProfile flag with sdk version check Yi-an Chen
b/398830041 currently impacts flag value matching for mainline module on V platform. According to trunk stable team, these flag checks can be replaced with sdk version check. Hence removing the flag checks in this CL Bug: 396234389 Test: Build Flag: EXEMPT bugfix Relnote: N/A Change-Id: Id351f1516d9db763e8d765da552d4da2182300b9
2025-03-11Merge "Exhaustive multi-device permission CTS" into main Vladimir Komsiyski
2025-03-11Merge "packages/modules/Permission: remove usages of ↵ Adrian Roos
Mockito.verifyZeroInteractions" into main
generated by cgit v1.2.3-59-g8ed1b (git 2.39.0) at 2025-10-20 00:07:34 +0000