Add extension permissions for Media Gallery API.

chrome/browser/extensions/api/media_gallery/media_gallery_api.cc

Index: chrome/browser/extensions/api/media_gallery/media_gallery_api.cc
diff --git a/chrome/browser/extensions/api/media_gallery/media_gallery_api.cc b/chrome/browser/extensions/api/media_gallery/media_gallery_api.cc
index 15698f6081fcc0582d9248ec50199fa61e7e28ee..6990056754705e9862922f0a89de65250727feb9 100644
--- a/chrome/browser/extensions/api/media_gallery/media_gallery_api.cc
+++ b/chrome/browser/extensions/api/media_gallery/media_gallery_api.cc
@@ -52,11 +52,16 @@ bool GetMediaFileSystemsFunction::RunImpl() {
         "dirname", Value::CreateStringValue("_"));
     list->Append(dict_value);
 
-    content::ChildProcessSecurityPolicy* policy =
-        ChildProcessSecurityPolicy::GetInstance();
-    if (!policy->CanReadFile(child_id, path))
-      policy->GrantReadFile(child_id, path);
-    policy->GrantReadFileSystem(child_id, fsid);
+
+    if (GetExtension()->HasAPIPermission(
+            extensions::APIPermission::kMediaGalleriesRead)) {
+      content::ChildProcessSecurityPolicy* policy =
+          ChildProcessSecurityPolicy::GetInstance();
+      if (!policy->CanReadFile(child_id, path))
+        policy->GrantReadFile(child_id, path);
+      policy->GrantReadFileSystem(child_id, fsid);
+    }
+    // TODO(vandebo) Handle write permission.
   }
 
   SetResult(list);