Add an experimental permissions API for extensions.

chrome/common/extensions/extension_permission_set.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_COMMON_EXTENSIONS_EXTENSION_PERMISSION_SET_H_
 #define CHROME_COMMON_EXTENSIONS_EXTENSION_PERMISSION_SET_H_
 #pragma once
 
 #include <map>
 #include <set>
 #include <string>
 #include <vector>
 
 #include "base/gtest_prod_util.h"
 #include "base/memory/singleton.h"
+#include "base/memory/ref_counted.h"
 #include "base/scoped_ptr.h"
 #include "base/string16.h"
 #include "chrome/common/extensions/url_pattern_set.h"
 
 class Extension;
 class ExtensionPrefs;
 
 // When prompting the user to install or approve permissions, we display
 // messages describing the effects of the permissions rather than listing the
 // permissions themselves. Each ExtensionPermissionMessage represents one of the
@@ skipping 88 matching lines @@
     kNotification,
     kProxy,
     kTab,
     kTts,
     kTtsEngine,
     kUnlimitedStorage,
     kWebSocketProxyPrivate,
     kWebstorePrivate,
     kDevtools,
     kPlugin,
+    kPermissions,
     kEnumBoundary
   };
 
   typedef std::set<ID> IDSet;
 
   ~ExtensionAPIPermission();
 
   // Returns the localized permission message associated with this api.
   ExtensionPermissionMessage GetMessage() const;
 
@@ skipping 125 matching lines @@
   size_t hosted_app_permission_count_;
   size_t permission_count_;
 
   friend struct DefaultSingletonTraits<ExtensionPermissionsInfo>;
   DISALLOW_COPY_AND_ASSIGN(ExtensionPermissionsInfo);
 };
 
 // The ExtensionPermissionSet is an immutable class that encapsulates an
 // extension's permissions. The class exposes set operations for combining and
 // manipulating the permissions.
-class ExtensionPermissionSet {
+class ExtensionPermissionSet
+    : public base::RefCountedThreadSafe<ExtensionPermissionSet> {
  public:
   // Creates an empty permission set (e.g. default permissions).
   ExtensionPermissionSet();
 
   // Creates a new permission set based on the |extension| manifest data, and
   // the api and host permissions (|apis| and |hosts|). The effective hosts
   // of the newly created permission set will be inferred from the |extension|
   // manifest, |apis| and |hosts|.
   ExtensionPermissionSet(const Extension* extension,
                          const ExtensionAPIPermissionSet& apis,
                          const URLPatternSet& explicit_hosts);
 
   // Creates a new permission set based on the specified data.
   ExtensionPermissionSet(const ExtensionAPIPermissionSet& apis,
                          const URLPatternSet& explicit_hosts,
                          const URLPatternSet& scriptable_hosts);
 
   ~ExtensionPermissionSet();
 
+  // Creates a new permission set equal to |set1| - |set2|, passing ownership of
+  // the new set to the caller.
+  static ExtensionPermissionSet* CreateDifference(
+      const ExtensionPermissionSet* set1, const ExtensionPermissionSet* set2);
+
+  // Creates a new permission set equal to the intersection of |set1| and
+  // |set2|, passing ownership of the new set to the caller.
+  static ExtensionPermissionSet* CreateIntersection(
+      const ExtensionPermissionSet* set1, const ExtensionPermissionSet* set2);
+
   // Creates a new permission set equal to the union of |set1| and |set2|.
   // Passes ownership of the new set to the caller.
   static ExtensionPermissionSet* CreateUnion(
       const ExtensionPermissionSet* set1, const ExtensionPermissionSet* set2);
 
+  bool operator==(const ExtensionPermissionSet& rhs) const;
+
+  // Returns true if |set| is a subset of this.
+  bool Contains(const ExtensionPermissionSet& set) const;
+
   // Gets the API permissions in this set as a set of strings.
   std::set<std::string> GetAPIsAsStrings() const;
 
   // Gets a list of the distinct hosts for displaying to the user.
   // NOTE: do not use this for comparing permissions, since this disgards some
   // information.
   std::set<std::string> GetDistinctHostsForDisplay() const;
 
   // Gets the localized permission messages that represent this set.
   ExtensionPermissionMessages GetPermissionMessages() const;
@@ skipping 42 matching lines @@
   const URLPatternSet& effective_hosts() const { return effective_hosts_; }
 
   const URLPatternSet& explicit_hosts() const { return explicit_hosts_; }
 
   const URLPatternSet& scriptable_hosts() const { return scriptable_hosts_; }
 
  private:
   FRIEND_TEST_ALL_PREFIXES(ExtensionPermissionSetTest,
                            HasLessHostPrivilegesThan);
 
+  friend class base::RefCountedThreadSafe<ExtensionPermissionSet>;
+
   static std::set<std::string> GetDistinctHosts(
       const URLPatternSet& host_patterns, bool include_rcd);
 
   // Initializes the set based on |extension|'s manifest data.
   void InitImplicitExtensionPermissions(const Extension* extension);
 
   // Initializes the effective host permission based on the data in this set.
   void InitEffectiveHosts();
 
   // Gets the permission messages for the API permissions.
   std::set<ExtensionPermissionMessage> GetSimplePermissionMessages() const;
 
   // Returns true if |permissions| has an elevated API privilege level than
   // this set.
   bool HasLessAPIPrivilegesThan(
       const ExtensionPermissionSet* permissions) const;
 
   // Returns true if |permissions| has more host permissions compared to this
   // set.
   bool HasLessHostPrivilegesThan(
       const ExtensionPermissionSet* permissions) const;
 
   // The api list is used when deciding if an extension can access certain
   // extension APIs and features.
   ExtensionAPIPermissionSet apis_;
 
   // The list of hosts that can be accessed directly from the extension.
+  // TODO(jstritar): Rename to "hosts_"?
   URLPatternSet explicit_hosts_;
 
   // The list of hosts that can be scripted by content scripts.
+  // TODO(jstritar): Rename to "user_script_hosts_"?
   URLPatternSet scriptable_hosts_;
 
   // The list of hosts this effectively grants access to.
   URLPatternSet effective_hosts_;
 };
 
 #endif  // CHROME_COMMON_EXTENSIONS_EXTENSION_PERMISSION_SET_H_