commit d4b2604109c9239e14b5c96678d751bf05ba4657
author Fyodor Kupolov <fkupolov@google.com> Mon Jul 27 14:30:59 2015 -0700
committer Fyodor Kupolov <fkupolov@google.com> Mon Jul 27 14:32:54 2015 -0700
tree 95f172f0adb8baeef10ced2a6048784b9cdb0dcb
parent c174de0ab353e2ecaf6e1728e6899bffcfefe48e

Added missing check for MANAGE_USERS

setUserRestriction should do the same permission check as setUserRestrictions
method.

Bug: 22767990
Change-Id: I01f0508ebb23deafaa32ad5dd7063b98a78641be

services/core/java/com/android/server/pm/UserManagerService.java

diff --git a/services/core/java/com/android/server/pm/UserManagerService.java b/services/core/java/com/android/server/pm/UserManagerService.java
index 23cb767..6707562 100644
--- a/services/core/java/com/android/server/pm/UserManagerService.java
+++ b/services/core/java/com/android/server/pm/UserManagerService.java
@@ -529,6 +529,7 @@
 
     @Override
     public void setUserRestriction(String key, boolean value, int userId) {
+        checkManageUsersPermission("setUserRestriction");
         synchronized (mPackagesLock) {
             if (!SYSTEM_CONTROLLED_RESTRICTIONS.contains(key)) {
                 Bundle restrictions = getUserRestrictions(userId);