| commit | 985e566ceca9c11d2f740499053f37dfaeb9033d | [log] [tgz] |
|---|---|---|
| author | Svetoslav <svetoslavganov@google.com> | Wed Aug 06 22:05:48 2014 -0700 |
| committer | Svetoslav Ganov <svetoslavganov@google.com> | Thu Aug 07 05:14:36 2014 +0000 |
| tree | b6dc8b3ba3543e9c3df516bfe5b07bb08313e368 | |
| parent | 14b7c54eeae4285f3c5084787c0607dd3103f20c [diff] |
Fix cross-user talk. An app can access widgets hosted or provided by its uid and package. Access is also allowed if the caller has the bind app widgets permission but this caller can be in the wrong user. Now the caller should not only have the bind app widget permission but also be in the same user as the host or the provider of the widget. bug:16834230 Change-Id: I5ddb6309f63f2b4ba95360446c2b9584350fb66f