Restrict access to permissions based on extension types.

chrome/common/extensions/extension.h

Index: chrome/common/extensions/extension.h
diff --git a/chrome/common/extensions/extension.h b/chrome/common/extensions/extension.h
index 146c53458965a863f2be73195dba7e8b83bff816..b37e9541a628ff9d34c5421903b284d639d2cc4b 100644
--- a/chrome/common/extensions/extension.h
+++ b/chrome/common/extensions/extension.h
@@ -688,8 +688,10 @@ class Extension : public base::RefCountedThreadSafe<Extension> {
                                std::string* error) const;
   bool CanSpecifyComponentOnlyPermission() const;
   bool CanSpecifyExperimentalPermission() const;
-  bool CanSpecifyPermissionForHostedApp(
-      const ExtensionAPIPermission* api) const;
+
+  // Returns true if the |permission| can be specified by this extension type.
+  bool CanSpecifyPermissionForType(

[Aaron Boodman, 2011/11/22 09:40:32]

It isn't clear to me from just these declarations how this is different than
CanSpecifyAPIPermission().

[jstritar, 2011/11/22 15:58:29]

Done- just rolled it into CanSpeicfyAPIPermission.

+      const ExtensionAPIPermission* permission) const;
 
   // Checks whether the host |pattern| is allowed for this extension, given API
   // permissions |permissions|.