apmanager: Grant apmanager group permission to send to org.chromium.apmanager.

Allows access control with group membership.
privetd will be put into the group in following CLs.

BUG=chromium:441172
TEST=none, only apmanager is member of the group yet.

Change-Id: I9a2eefb281de69c1d8361cf15ff966f9b3b35718
Reviewed-on: https://chromium-review.googlesource.com/234904
Tested-by: Vitaly Buka <vitalybuka@chromium.org>
Trybot-Ready: Vitaly Buka <vitalybuka@chromium.org>
Reviewed-by: Alex Vakulenko <avakulenko@chromium.org>
Commit-Queue: Vitaly Buka <vitalybuka@chromium.org>
diff --git a/dbus_permissions/org.chromium.apmanager.conf b/dbus_permissions/org.chromium.apmanager.conf
index 6035d27..540a629 100644
--- a/dbus_permissions/org.chromium.apmanager.conf
+++ b/dbus_permissions/org.chromium.apmanager.conf
@@ -5,10 +5,15 @@
         <allow own="org.chromium.apmanager"/>
         <allow send_destination="org.chromium.apmanager"/>
     </policy>
+
     <policy user="apmanager">
         <allow own="org.chromium.apmanager"/>
-        <allow send_destination="org.chromium.apmanager"/>
     </policy>
+
+    <policy group="apmanager">
+        <allow send_destination="org.chromium.apmanager" />
+    </policy>
+
     <policy context="default">
         <deny send_destination="org.chromium.apmanager"/>
     </policy>