Restrict access to permissions based on extension types.

chrome/browser/renderer_host/chrome_render_view_host_observer.cc

Index: chrome/browser/renderer_host/chrome_render_view_host_observer.cc
diff --git a/chrome/browser/renderer_host/chrome_render_view_host_observer.cc b/chrome/browser/renderer_host/chrome_render_view_host_observer.cc
index 81d4f8cff4476749918377ed126cd5ecfa2cf0c1..06d84e7f9158efffbda55dccb152d2a51e8ef829 100644
--- a/chrome/browser/renderer_host/chrome_render_view_host_observer.cc
+++ b/chrome/browser/renderer_host/chrome_render_view_host_observer.cc
@@ -111,7 +111,11 @@ void ChromeRenderViewHostObserver::InitRenderViewForExtensions() {
       type == Extension::TYPE_PACKAGED_APP) {
     ChildProcessSecurityPolicy::GetInstance()->GrantScheme(
         process->GetID(), chrome::kChromeUIScheme);
+  }
 
+  if (type == Extension::TYPE_EXTENSION ||

[Aaron Boodman, 2011/11/30 21:32:16]

Why did you add this check?

+      type == Extension::TYPE_PACKAGED_APP ||
+      type == Extension::TYPE_PLATFORM_APP) {
     if (profile_->GetExtensionService()->extension_prefs()->AllowFileAccess(
           extension->id())) {
       ChildProcessSecurityPolicy::GetInstance()->GrantScheme(
@@ -122,6 +126,7 @@ void ChromeRenderViewHostObserver::InitRenderViewForExtensions() {
   if (type == Extension::TYPE_EXTENSION ||
       type == Extension::TYPE_USER_SCRIPT ||
       type == Extension::TYPE_PACKAGED_APP ||
+      type == Extension::TYPE_PLATFORM_APP ||
       (type == Extension::TYPE_HOSTED_APP &&
        extension->location() == Extension::COMPONENT)) {
     Send(new ExtensionMsg_ActivateExtension(extension->id()));