Track permissions granted to extensions in prefs

chrome/common/extensions/extension.h

Index: chrome/common/extensions/extension.h
diff --git a/chrome/common/extensions/extension.h b/chrome/common/extensions/extension.h
index ce7e6286d8541145e4fce2a4a5eb836c72deadb3..7c3416bd143bbde949b19fcdcb8a1fe745c66a27 100644
--- a/chrome/common/extensions/extension.h
+++ b/chrome/common/extensions/extension.h
@@ -254,6 +254,12 @@ class Extension : public base::RefCountedThreadSafe<Extension> {
   static bool IsPrivilegeIncrease(const Extension* old_extension,
                                   const Extension* new_extension);
 
+  // Determine whether the |extension| has increased privileges compared to
+  // its previous |granted_apis| and |granted_hosts| permissions.
+  static bool IsPrivilegeIncrease(const std::set<std::string>* granted_apis,
+                                  const std::set<std::string>* granted_hosts,
+                                  const Extension* extension);
+
   // Given an extension and icon size, read it if present and decode it into
   // result. In the browser process, this will DCHECK if not called on the
   // file thread. To easily load extension images on the UI thread, see