Tabs API is usable without tabs permission.

chrome/browser/extensions/browser_extension_window_controller.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/browser_extension_window_controller.h"
 
 #include "chrome/browser/extensions/api/tabs/tabs_constants.h"
 #include "chrome/browser/extensions/extension_tab_util.h"
 #include "chrome/browser/extensions/window_controller_list.h"
 #include "chrome/browser/profiles/profile.h"
@@ skipping 30 matching lines @@
   return keys::kWindowTypeValueNormal;
 }
 
 base::DictionaryValue*
 BrowserExtensionWindowController::CreateWindowValue() const {
   DictionaryValue* result = extensions::WindowController::CreateWindowValue();
   return result;
 }
 
 base::DictionaryValue*
-BrowserExtensionWindowController::CreateWindowValueWithTabs() const {
+BrowserExtensionWindowController::CreateWindowValueWithTabs(
+    const extensions::Extension* extension) const {
   DictionaryValue* result = CreateWindowValue();
 
-  result->Set(keys::kTabsKey, ExtensionTabUtil::CreateTabList(browser_));
+  result->Set(keys::kTabsKey, ExtensionTabUtil::CreateTabList(browser_,
+                                                              extension));
 
   return result;
 }
 
 bool BrowserExtensionWindowController::CanClose(Reason* reason) const {
   // Don't let an extension remove the window if the user is dragging tabs
   // in that window.
   if (!chrome::IsTabStripEditable(browser_)) {
     *reason = extensions::WindowController::REASON_NOT_EDITABLE;
     return false;
@@ skipping 11 matching lines @@
 Browser* BrowserExtensionWindowController::GetBrowser() const {
   return browser_;
 }
 
 bool BrowserExtensionWindowController::IsVisibleToExtension(
     const extensions::Extension* extension) const {
   // Platform apps can only see their own windows.
   // TODO(mihaip): what about non-Aura panels?
   return !extension->is_platform_app();
 }