Index: webkit/fileapi/sandbox_mount_point_provider.cc |
diff --git a/webkit/fileapi/sandbox_mount_point_provider.cc b/webkit/fileapi/sandbox_mount_point_provider.cc |
index 8ffd14421a23144a464e2d87f40a90aef0ab319f..0ed81b493e24e375c226d77c14421e498bff5062 100644 |
--- a/webkit/fileapi/sandbox_mount_point_provider.cc |
+++ b/webkit/fileapi/sandbox_mount_point_provider.cc |
@@ -255,11 +255,13 @@ FileSystemFileUtil* SandboxMountPointProvider::GetFileUtil( |
return sandbox_file_util_.get(); |
} |
-FilePath SandboxMountPointProvider::GetPathForPermissionsCheck( |
- const FilePath& virtual_path) const { |
- // Sandbox provider shouldn't directly grant permissions for its |
- // data directory. |
- return FilePath(); |
+FilePermissionPolicy SandboxMountPointProvider::GetPermissionPolicy( |
+ const FileSystemURL& url, int permissions) const { |
+ // Access to the sandbox directory (and only to the directory) should be |
+ // always allowed. |
+ CHECK(CanHandleType(url.type())); |
+ CHECK(!url.path().ReferencesParent()); |
+ return FILE_PERMISSION_ALWAYS_ALLOW; |
} |
FileSystemOperation* SandboxMountPointProvider::CreateFileSystemOperation( |