Support socket endpoint permissions for AppsV2 Socket API.

chrome/common/extensions/permissions/socket_permission.h

Index: chrome/common/extensions/permissions/socket_permission.h
diff --git a/chrome/common/extensions/permissions/socket_permission.h b/chrome/common/extensions/permissions/socket_permission.h
new file mode 100644
index 0000000000000000000000000000000000000000..42146a583da18e8842725baef80fbb3bc6c17c57
--- /dev/null
+++ b/chrome/common/extensions/permissions/socket_permission.h
@@ -0,0 +1,83 @@
+// Copyright (c) 2012 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_COMMON_EXTENSIONS_PERMISSIONS_SOCKET_PERMISSION_H_
+#define CHROME_COMMON_EXTENSIONS_PERMISSIONS_SOCKET_PERMISSION_H_
+
+#include "chrome/common/extensions/permissions/api_permission.h"
+#include "chrome/common/extensions/permissions/socket_permission_data.h"
+
+namespace extensions {
+
+class SocketPermission : public APIPermissionDetail {
+ public:
+  struct CheckParam : APIPermissionDetail::CheckParam {
+    CheckParam(SocketPermissionData::OperationType type,
+        const std::string& host,
+        int port)
+      : type(type),
+        host(host),
+        port(port) { }
+    SocketPermissionData::OperationType type;
+    std::string host;
+    int port;
+  };
+
+  explicit SocketPermission(const APIPermission* permission);
+
+  // Returns true if the given permission in param is allowed.
+  virtual bool Check(
+      const APIPermissionDetail::CheckParam* param) const OVERRIDE;
+
+  // Returns true if |detail| is a subset of this.
+  virtual bool Contains(const APIPermissionDetail* rhs) const OVERRIDE;
+
+  // Returns true if |detail| is equal to this.
+  virtual bool Equal(const APIPermissionDetail* rhs) const OVERRIDE;
+
+  // Parses the detail from |value|. Returns false if error happens.
+  virtual bool FromValue(const base::Value* value) OVERRIDE;
+
+  // Stores this into a new created |value|.
+  virtual void ToValue(base::Value** value) const OVERRIDE;
+
+  // Clones this.
+  virtual APIPermissionDetail* Clone() const OVERRIDE;
+
+  // Returns a new API permission detail which equals this - |detail|.
+  virtual APIPermissionDetail* Diff(
+      const APIPermissionDetail* rhs) const OVERRIDE;
+
+  // Returns a new API permission detail which equals the union of this and
+  // |detail|.
+  virtual APIPermissionDetail* Union(
+      const APIPermissionDetail* rhs) const OVERRIDE;
+
+  // Returns a new API permission detail which equals the intersect of this and
+  // |detail|.
+  virtual APIPermissionDetail* Intersect(
+      const APIPermissionDetail* rhs) const OVERRIDE;
+
+  // IPC functions
+  // Writes this into the given IPC message |m|.
+  virtual void Write(IPC::Message* m) const OVERRIDE;
+
+  // Reads from the given IPC message |m|.
+  virtual bool Read(const IPC::Message* m, PickleIterator* iter) OVERRIDE;
+
+  // Logs this detail.
+  virtual void Log(std::string* log) const OVERRIDE;
+
+ protected:
+  friend base::RefCounted<APIPermissionDetail>;
+
+  virtual ~SocketPermission();
+
+ private:

[miket_OOO, 2012/08/06 21:04:06]

You should #include <set>, as well as other stuff this file directly uses
(RefCounted, IPC::Message, etc.). As it is, it only happens to build because the
included files already include those files.

[Peng, 2012/08/07 21:31:55]

Done.

+  std::set<SocketPermissionData> data_set_;
+};
+
+}  // namespace extensions
+
+#endif  // CHROME_COMMON_EXTENSIONS_PERMISSIONS_SOCKET_PERMISSION_H_