Tabs API is usable without tabs permission.

chrome/browser/ui/panels/panel.cc

Index: chrome/browser/ui/panels/panel.cc
diff --git a/chrome/browser/ui/panels/panel.cc b/chrome/browser/ui/panels/panel.cc
index af6adf1a705e6a1a7f1c3abbf8e156b4ed7e6462..ee700961eab381cc558caf3d4969257f6098982f 100644
--- a/chrome/browser/ui/panels/panel.cc
+++ b/chrome/browser/ui/panels/panel.cc
@@ -38,6 +38,10 @@
 using content::RenderViewHost;
 using content::UserMetricsAction;
 
+namespace extensions {
+class Extension;
+}
+
 namespace panel_internal {
 
 class PanelExtensionWindowController : public extensions::WindowController {
@@ -48,7 +52,8 @@ class PanelExtensionWindowController : public extensions::WindowController {
   // Overridden from extensions::WindowController.
   virtual int GetWindowId() const OVERRIDE;
   virtual std::string GetWindowTypeText() const OVERRIDE;
-  virtual base::DictionaryValue* CreateWindowValueWithTabs() const OVERRIDE;
+  virtual base::DictionaryValue* CreateWindowValueWithTabs(
+      const extensions::Extension* extension) const OVERRIDE;
   virtual bool CanClose(Reason* reason) const OVERRIDE;
   virtual void SetFullscreenMode(bool is_fullscreen,
                                  const GURL& extension_url) const OVERRIDE;
@@ -80,7 +85,8 @@ std::string PanelExtensionWindowController::GetWindowTypeText() const {
 }
 
 base::DictionaryValue*
-PanelExtensionWindowController::CreateWindowValueWithTabs() const {
+PanelExtensionWindowController::CreateWindowValueWithTabs(
+    const extensions::Extension* extension) const {
   base::DictionaryValue* result = CreateWindowValue();
 
   // Safe to include info about the web contents as this is only called

[Aaron Boodman, 2012/08/31 20:28:51]

Hm, this is an example of a place where it should be OK to return url and title,
even though the extension doesn't have tabs permission. How do you plan to
handle this once this patch lands?

[jennb, 2012/08/31 21:41:01]

Once I had an extension param, I want to add a
DCHECK(IsVisibleToExtension(extension);

Per IM conversation, chebert will replace the TODO with that DCHECK in this
patch before committing.