Track permissions granted to extensions in prefs

chrome/common/extensions/extension.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_COMMON_EXTENSIONS_EXTENSION_H_
 #define CHROME_COMMON_EXTENSIONS_EXTENSION_H_
 #pragma once
 
 #include <map>
 #include <set>
@@ skipping 145 matching lines @@
 
   static const Permission kPermissions[];
   static const size_t kNumPermissions;
   static const char* const kHostedAppPermissionNames[];
   static const size_t kNumHostedAppPermissions;
 
   // The old name for the unlimited storage permission, which is deprecated but
   // still accepted as meaning the same thing as kUnlimitedStoragePermission.
   static const char kOldUnlimitedStoragePermission[];
 
+  // Valid schemes for web extent URLPatterns.
+  static const int kValidWebExtentSchemes;
+
   // Returns true if the string is one of the known hosted app permissions (see
   // kHostedAppPermissionNames).
   static bool IsHostedAppPermission(const std::string& permission);
 
   // The name of the manifest inside an extension.
   static const FilePath::CharType kManifestFilename[];
 
   // The name of locale folder inside an extension.
   static const FilePath::CharType kLocaleFolder[];
 
@@ skipping 67 matching lines @@
   // Generates an extension ID from arbitrary input. The same input string will
   // always generate the same output ID.
   static bool GenerateId(const std::string& input, std::string* output);
 
   // Expects base64 encoded |input| and formats into |output| including
   // the appropriate header & footer.
   static bool FormatPEMForFileOutput(const std::string input,
       std::string* output, bool is_public);
 
   // Determine whether |new_extension| has increased privileges compared to
-  // |old_extension|.
-  static bool IsPrivilegeIncrease(const Extension* old_extension,
+  // its previously granted permissions, specified by |granted_apis|,
+  // |granted_extent| and |granted_full_access|.
+  static bool IsPrivilegeIncrease(const bool granted_full_access,
+                                  const std::set<std::string>& granted_apis,
+                                  const ExtensionExtent& granted_extent,
                                   const Extension* new_extension);
 
   // Given an extension and icon size, read it if present and decode it into
   // result. In the browser process, this will DCHECK if not called on the
   // file thread. To easily load extension images on the UI thread, see
   // ImageLoadingTracker.
   static void DecodeIcon(const Extension* extension,
                          Icons icon_size,
                          scoped_ptr<SkBitmap>* result);
 
@@ skipping 29 matching lines @@
       UserScript* script,
       std::string* error);
 
   // Adds an extension to the scripting whitelist. Used for testing only.
   static void SetScriptingWhitelist(const ScriptingWhitelist& whitelist);
 
   // Returns true if the extension has the specified API permission.
   static bool HasApiPermission(const std::set<std::string>& api_permissions,
                                const std::string& function_name);
 
+  // Whether the |effective_host_permissions| and |api_permissions| include
+  // effective access to all hosts. See the non-static version of the method
+  // for more details.
+  static bool HasEffectiveAccessToAllHosts(
+      const ExtensionExtent& effective_host_permissions,
+      const std::set<std::string>& api_permissions);
+
   bool HasApiPermission(const std::string& function_name) const {
     return HasApiPermission(this->api_permissions(), function_name);
   }
 
   const ExtensionExtent& GetEffectiveHostPermissions() const {
     return effective_host_permissions_;
   }
 
   // Whether or not the extension is allowed permission for a URL pattern from
   // the manifest.  http, https, and chrome://favicon/ is allowed for all
@@ skipping 369 matching lines @@
   std::set<std::string> extension_api_permissions;
   // TODO(akalin): Once we have a unified ExtensionType, replace the
   // below member variables with a member of that type.
   bool is_theme;
   bool is_app;
   bool converted_from_user_script;
   GURL update_url;
 };
 
 #endif  // CHROME_COMMON_EXTENSIONS_EXTENSION_H_