Add a centralized mechanism for whitelisting access to extension permissions.

chrome/common/extensions/extension_manifests_unittest.cc

Index: chrome/common/extensions/extension_manifests_unittest.cc
diff --git a/chrome/common/extensions/extension_manifests_unittest.cc b/chrome/common/extensions/extension_manifests_unittest.cc
index 0cadcb734c194709d37f7cb5a3b510f1b669f390..7c52a90e381f0ebb7c2f343c356204ffeb12bb8a 100644
--- a/chrome/common/extensions/extension_manifests_unittest.cc
+++ b/chrome/common/extensions/extension_manifests_unittest.cc
@@ -597,8 +597,13 @@ TEST_F(ExtensionManifestTest, HostedAppPermissions) {
     permissions->Clear();
     permissions->Append(p);
 
+    if (permission->should_enforce_whitelist()) {
+      LoadAndExpectError(Manifest(manifest.get(), name),
+                         errors::kPermissionNotAllowed,
+                         Extension::INTERNAL);
+
     // Some permissions are only available to component hosted apps.
-    if (permission->is_component_only()) {
+    } else if (permission->is_component_only()) {
       LoadAndExpectError(Manifest(manifest.get(), name),
                          errors::kPermissionNotAllowed,
                          Extension::INTERNAL);