Restrict access to permissions based on extension types.

chrome/common/extensions/extension_permission_set_unittest.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/extensions/extension_permission_set.h"
 
 #include "base/json/json_value_serializer.h"
 #include "base/logging.h"
 #include "base/path_service.h"
 #include "base/utf_string_conversions.h"
@@ skipping 140 matching lines @@
   hosted_perms.insert(ExtensionAPIPermission::kGeolocation);
   hosted_perms.insert(ExtensionAPIPermission::kNotification);
   hosted_perms.insert(ExtensionAPIPermission::kUnlimitedStorage);
   hosted_perms.insert(ExtensionAPIPermission::kWebstorePrivate);
 
   ExtensionAPIPermissionSet perms = info->GetAll();
   size_t count = 0;
   for (ExtensionAPIPermissionSet::iterator i = perms.begin();
        i != perms.end(); ++i) {
     count += hosted_perms.count(*i);
-    EXPECT_EQ(hosted_perms.count(*i) > 0, info->GetByID(*i)->is_hosted_app());
+    EXPECT_EQ(hosted_perms.count(*i) > 0,
+              info->GetByID(*i)->supports_hosted_apps());
   }
 
   EXPECT_EQ(hosted_perms.size(), count);
-  EXPECT_EQ(hosted_perms.size(), info->get_hosted_app_permission_count());
+}
+
+TEST(ExtensionAPIPermissionTest, PlatformAppPermissions) {
+  ExtensionPermissionsInfo* info = ExtensionPermissionsInfo::GetInstance();
+  ExtensionAPIPermissionSet blacklist;
+  blacklist.insert(ExtensionAPIPermission::kChromeAuthPrivate);
+  blacklist.insert(ExtensionAPIPermission::kChromePrivate);
+  blacklist.insert(ExtensionAPIPermission::kCookie);
+  blacklist.insert(ExtensionAPIPermission::kTab);
+  blacklist.insert(ExtensionAPIPermission::kWebNavigation);
+  blacklist.insert(ExtensionAPIPermission::kWebRequest);
+  blacklist.insert(ExtensionAPIPermission::kWebRequestBlocking);
+  blacklist.insert(ExtensionAPIPermission::kWebSocketProxyPrivate);
+
+  ExtensionAPIPermissionSet perms = info->GetAll();
+  size_t count = 0;
+  for (ExtensionAPIPermissionSet::iterator i = perms.begin();
+       i != perms.end(); ++i) {
+    count += blacklist.count(*i);
+    EXPECT_EQ(blacklist.count(*i) > 0,
+              !info->GetByID(*i)->supports_platform_apps());
+  }
+
+  EXPECT_EQ(blacklist.size(), count);
 }
 
 TEST(ExtensionAPIPermissionTest, ComponentOnlyPermissions) {
   ExtensionPermissionsInfo* info = ExtensionPermissionsInfo::GetInstance();
   ExtensionAPIPermissionSet private_perms;
   private_perms.insert(ExtensionAPIPermission::kChromeAuthPrivate);
   private_perms.insert(ExtensionAPIPermission::kChromeosInfoPrivate);
   private_perms.insert(ExtensionAPIPermission::kFileBrowserPrivate);
   private_perms.insert(ExtensionAPIPermission::kMediaPlayerPrivate);
   private_perms.insert(ExtensionAPIPermission::kMetricsPrivate);
@@ skipping 922 matching lines @@
   AddPattern(&non_empty_extent, "http://www.google.com/*");
 
   perm_set = new ExtensionPermissionSet(
       empty_apis, non_empty_extent, empty_extent);
   EXPECT_FALSE(perm_set->IsEmpty());
 
   perm_set = new ExtensionPermissionSet(
       empty_apis, empty_extent, non_empty_extent);
   EXPECT_FALSE(perm_set->IsEmpty());
 }